Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/08/19 3:15 p.m.•19 views

Malicious Package

Overview novel-suduko is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/19 9:31 a.m.•5 views

Malicious code in novel-suduko (npm)

Source: amazon-inspector 21725a395742c4e3e10cd14a3c787d7a01d5cea63feec2515310f471d497f8ad The package's postinstall lifecycle script chmods and executes the bundled binary native/hint-linux-amd64 via spawnSyncBIN, , stdio: 'inherit' on every linux-x64 install, with errors silently swallowed by a...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/19 6:22 a.m.•33 views

Malicious code in novel-suduko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21725a395742c4e3e10cd14a3c787d7a01d5cea63feec2515310f471d497f8ad The package's postinstall lifecycle script chmods and executes the bundled binary native/hint-linux-amd64 via spawnSyncBIN, , stdio: 'inherit' on eve...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder