Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/06/23 12:15 p.m.•19 views

Malicious Package

Overview new-ts-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSV
OSV
•added 2026/06/19 2:24 p.m.•36 views

MAL-2026-6226 Malicious code in new-mjs-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ae24b182a00059424b8ea4800927bbbf662f0e6bf20264af611d37203a3f2e Package is published under the unrelated name 'new-mjs-eslint' but ships a verbatim copy of the big.js decimal-arithmetic library original...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/19 2:13 p.m.•28 views

Malicious code in new-ts-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3721ae4cecdfa22793382d07d28a25ba5fabd54ac405cb94e642a1f96faee80 index.js imports childprocess and at lines 101 and 117 invokes execSync to run bash and zsh commands. Lines 9, 194, and 195 use Buffer.from...,...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder