142 matches found
netmap.js
netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...
netmap.js
netmap.js 基于浏览器的快速网络发现模块 该项目已不再维护。 描述 netmap.js 提供基于浏览器的主机发现和端口扫描功能，允许你绘制网站访客的网络地图。 它速度相当快，利用 es6-promise-pool 在浏览器允许的最大并发连接数下高效运行。 动机 我为自己正在构思的一个想法需要一个基于浏览器的端口扫描器。原以为只需导入一个现有模块或从 BeEF 之类的其他项目中复制粘贴即可。 结果发现，并没有一个现成的、可用的、像样的 npm 模块，而 BeEF 中的 portscanner 模块（在撰写本文时）既不准确又缓慢，并且在 Chromium 上无法工作。...
web_exploit_detector
Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...
CVE-2023-30533
POC - CVE-2023-30533 CVE-2023-30533 的 POC 按以下来源复制：https://cdn.sheetjs.com/advisories/CVE-2023-30533: root@kitploit: SheetJS Community Edition 版本 0.19.2 及之前的所有发行版均受影响。包括： root@kitploit: - SheetJS CDN 上版本 0.19.2 及之前的脚本和模块 2 - 以名称 xlsx 发布到 npmjs.com 的模块 3 - 从 npmjs.com 的 xlsx 包拉取的第三方 CDN 上的脚本 4 5 -...
Malicious code in npm-module-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8000a7baeda176481fd23b624485b3e419d6bed7f954900229de069c8ec4e026 The default export getPlugin in index.js performs an HTTPS request to the hardcoded bare-IP endpoint https://46.183.25.232:45000/icons/107 and passes...
MAL-2026-6192 Malicious code in nodepathbalance54 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ade836e7f92049242a01dbc0782900900c4e28eb7e08f9d9ebc611aab80762 nodepathbalance54 exports a single function nodeaxionweb whose implementation is hidden inside a hand-rolled stack-based JavaScript VM in index.js...
MAL-2026-5928 Malicious code in chai-test-mocks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a1bfd9f5d478d2cc7c947470544e99015a830dd5ecbb7ad8cdb54976c8d6ef chai-test-mocks impersonates the legitimate chai-jest-mocks package replicated README, reused CircleCI/coveralls badges pointing at chai-jest-mocks b...
MAL-2026-5753 Malicious code in @gbrlxvi/ts-form-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e77262ebb59497687fabfba394959da9ce6afbaf436aa5fcf654b2c8a44a32 Package advertises trivial form-validation helpers notEmpty/isEmail/isPhone/maxLen/minLen but on require/import of the main module performs an...
Malicious code in @a91082900/test_package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8349cd7ce2c9ac2321dce8f80e5a46c0064b382fb7e54e975ff27a2dcab1254 The package's main file index.js executes at module load, with no exports and no user-invoked API. On import it issues...
EUVD-2025-177780
Malicious code in module-phoebe-elara-meissa npm...
MAL-2025-188105 Malicious code in module-void-fast-thread-double (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26e82491011138f549db0c2dc4d0e2c8d67663ea485fd682a4ba8ddd7a2d647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176728
Malicious code in reject-book-catch-module-short npm...
EUVD-2025-177784
Malicious code in module-biomimicry-rollup-comet npm...
EUVD-2025-177779
Malicious code in module-serialize-fire-bash-mu npm...
Malicious code in module-aquarius-enceladus-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63f3f27fbe339dc4251662e7eff0b53ce4ace803ff7b70b213dcab09c3f72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188100 Malicious code in module-fornax-elara-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5fd83f12dfdf42a042b92d48a11b6d2b5328ccfae5ed402dbfb93ba125db69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-144229
Malicious code in verts-otimo-nag npm...
Malicious code in uinsnu-lotaizmi-kunsilu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca0f85984fe9e20a710ef0cb97c03d4f5b6b74944408bdcac41b4fa07fab2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umbra-sirius-scorpius-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...