Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 6:14 p.m.•6 views

Malware in nwfp-build-config

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/10/20 6:14 p.m.•6 views

MAL-2026-18107 Malicious code in nwfp-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905a5825cb8abf7b385b98cfade02c315a4bc776bc37cfacd5ab20d5b8d03640 On require of nwfp-build-config, index.js loads lib/telemetry.js, which immediately runs an IIFE that reads the installer's hostname os.hostname and...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/20 6:14 p.m.•5 views

Malicious code in nwfp-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905a5825cb8abf7b385b98cfade02c315a4bc776bc37cfacd5ab20d5b8d03640 On require of nwfp-build-config, index.js loads lib/telemetry.js, which immediately runs an IIFE that reads the installer's hostname os.hostname and...

5.7AI score
SaveExploits0References2
Rows per page
Query Builder