Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•19 views

Malicious Package

Overview orca-website is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•4 views

Malicious code in orca-website (npm)

Source: amazon-inspector c52f7fe46d56cb45880942f5266494a2654d9d330914a6c3c99f02045eacd1dc On require/import, index.js collects host identifiers os.hostname, os.userInfo.username, os.platform, os.arch, process.cwd, process.pid, timestamp and sends them as URL query parameters via HTTPS GET to a...

5.8AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/05/22 7:36 p.m.•21 views

MAL-2026-4632 Malicious code in orca-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f7fe46d56cb45880942f5266494a2654d9d330914a6c3c99f02045eacd1dc On require/import, index.js collects host identifiers os.hostname, os.userInfo.username, os.platform, os.arch, process.cwd, process.pid, timestamp an...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder