Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/06 6:31 p.m.6 views

Malicious code in node-pre-gyp-test-app2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3456b640ac819fb66bf7f58e41f74e65b868629f609e863ca1bbe300070e7a8 The OpenSSF Package Analysis project identified 'node-pre-gyp-test-app2' @ 0.1.0-release1.release2 npm as malicious. It is considered malicious...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/05/24 4:43 p.m.8 views

GHSA-7CGC-FJV4-52X6 Malware in pre-build binaries of bignum

Impact bignum releases from v0.12.2 to v0.13.0 inclusive used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party which is now serving binaries containing malwa...

5.9AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/05/24 4:43 p.m.56 views

Malware in pre-build binaries of bignum

Impact bignum releases from v0.12.2 to v0.13.0 inclusive used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party which is now serving binaries containing malwa...

6.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder