Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/30 9:49 p.m.•26 views

Malicious code in node-logger-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c9326339f3b11409e2afdb6f4ef3a338ce1fc23a1b8ea0511236e847118b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/07/30 9:49 p.m.•17 views

Malicious Package

Overview node-logger-winston is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/30 9:49 p.m.•28 views

MAL-2026-11341 Malicious code in node-logger-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34c9326339f3b11409e2afdb6f4ef3a338ce1fc23a1b8ea0511236e847118b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder