Lucene search
K

6 matches found

OSV
OSV
added 2022/07/26 10:10 a.m.7 views

MAL-2022-4702 Malicious code in mozi-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e2bc045cb40979fef13d9b9815cec571cd4b48e9ea09cbf972b7d2b5b07b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/26 10:10 a.m.3 views

Malicious code in ys-mozi-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22928c2bf616a636fd9bd355579f92c3088f3e8abdd989e18487c4f347d06b50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/26 10:10 a.m.3 views

Malicious code in mozi-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e2bc045cb40979fef13d9b9815cec571cd4b48e9ea09cbf972b7d2b5b07b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/07/26 10:10 a.m.5 views

MAL-2022-7370 Malicious code in ys-mozi-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22928c2bf616a636fd9bd355579f92c3088f3e8abdd989e18487c4f347d06b50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Snyk
Snyk
added 2022/07/14 8:9 a.m.2 views

Malicious Package

Overview mozi-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/07/14 8:9 a.m.2 views

Malicious Package

Overview ys-mozi-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
Exploits0References3
Rows per page
Query Builder