6 matches found
CVE-2021-26700
CVE-2021-26700 Note: this manual is valid for DSNS lab's members only. Intruduction This is a remote code execution RCE vulnerability that resided in an extension of Visual Studio Code VS Code called npm, which was developed by Microsoft and was aimed to support running the npm scripts defined in...
Malicious Package
Overview npm-extension is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in npm-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c4f2b94932e8bcb68c0a146d536b7e3a00d48041aa5a6fc9edf9f82ae5244 package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/npm-extension rather than a registry version range. ...
MAL-2026-15515 Malicious code in npm-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c4f2b94932e8bcb68c0a146d536b7e3a00d48041aa5a6fc9edf9f82ae5244 package.json declares a dependency whose value is a bare HTTPS URL https://repo.securityctrl.com/npm-extension rather than a registry version range. ...
