Malicious code in node-spdy (npm)

The package node-spdy was found to contain malicious code...

MAL-2025-27658 Malicious code in node-spdy (npm)

The package node-spdy was found to contain malicious code...

GHSA-WFJH-3HQ2-R276 Malicious Package in node-spdy

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package in node-spdy

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package

node-spdy is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...