Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/04 6:31 a.m.•7 views

Malicious code in net-util-y8 (npm)

Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The description field in package.json is a 56KB base64 blob that...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•15 views

Malicious Package

Overview net-util-y8 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/09/04 3:46 a.m.•20 views

MAL-2026-15901 Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/04 3:46 a.m.•43 views

Malicious code in net-util-y8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e81ce327647324756e0ea15d1016d45cd5bb092dd0099418ba2db59eca98a7 The package has no real functionality: index.js contains only an empty comment and package.json declares no exports or lifecycle scripts. The...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder