Lucene search
+L

2 matches found

Snyk
Snyk
added 2025/11/24 8:33 p.m.3 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 4:25 a.m.6 views

Malicious code in lisa-mangga66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c312ca6effae19e73bdbdc0a6a1f08a11dcc4ebd57f3914e19c628fc7d6f61a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
Rows per page
Query Builder