Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•39 views

Malicious Package

Overview osep-react-antd is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•4 views

Malicious code in osep-react-antd (npm)

Source: amazon-inspector 9373e8880ad89854cc168b48a36c59bd72abfaf220e08fb751b948f0c4d8ddfb package.json declares preinstall: node index.js, which runs automatically on npm install. index.js collects host identifiers os.hostname, process.platform, arch, os.homedir, os.userInfo including...

5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder