Malicious code in node-pre-gyp-test-app2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3456b640ac819fb66bf7f58e41f74e65b868629f609e863ca1bbe300070e7a8 The OpenSSF Package Analysis project identified 'node-pre-gyp-test-app2' @ 0.1.0-release1.release2 npm as malicious. It is considered malicious...

GHSA-7CGC-FJV4-52X6 Malware in pre-build binaries of bignum

Impact bignum releases from v0.12.2 to v0.13.0 inclusive used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party which is now serving binaries containing malwa...

Malware in pre-build binaries of bignum

Impact bignum releases from v0.12.2 to v0.13.0 inclusive used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party which is now serving binaries containing malwa...

PT-2023-32989

Name of the Vulnerable Software and Affected Versions bignum versions 0.12.2 through 0.13.0 Description The issue concerns the use of node-pre-gyp to download pre-built binary versions of the addon. These binaries were previously hosted on an S3 bucket that has since expired and been claimed by a...