Lucene search
+L

630112 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/04 6:37 a.m.•38 views

Malicious code in claude-channel-discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40db25d41cbf34007ee5be9e31462d8346c3ec51dcb5b72160e76739aaedf4ad [email protected] is a dependency-confusion probe. package.json declares preinstall and postinstall hooks node index.js --save-prod and a...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/04 6:34 a.m.•36 views

Malicious code in real-router-telemetry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bc9af22f0b3feafc2dbd863d7ce4b9ba26418ab58e87bc231123004a40a450 Package ships telemetry.js, an obfuscated module string-array accessor pattern hiding identifiers and the destination that reads host identity...

5.4AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/09/04 6:33 a.m.•26 views

MAL-2026-15923 Malicious code in line-through (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080fb3d5e59c5c950dd4dd0c2eb1841cdc2943e1543bd7803f7ca27d1756e60 The package's package.json preinstall hook runs vishu.js, which at npm install time collects the installer's public IP via api.ipify.org, OS hostname...

5.5AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•14 views

Malicious Package

Overview easyupnp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•14 views

Malicious Package

Overview b2b-frontend-external-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•9 views

Malicious Package

Overview easy-pipe-signal-proxy-uglify is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•21 views

Malicious Package

Overview ee-web-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•14 views

Malicious Package

Overview dajouka-taa-t9a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•10 views

Malicious Package

Overview easternswan-appteadev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•12 views

Malicious Package

Overview dyinglampreyz3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•16 views

Malicious Package

Overview trading-bot-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•13 views

Malicious Package

Overview linkpreview-simple is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•13 views

Malicious Package

Overview damaged-black-mosquito is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•8 views

Malicious Package

Overview iframe-to-video is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•8 views

Malicious Package

Overview damagedcricket-appteadev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•12 views

Malicious Package

Overview edcm-gui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•13 views

Malicious Package

Overview cb-wallet-metadata is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•11 views

Malicious Package

Overview google-img-scrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•7 views

Malicious Package

Overview dactyl-titan-cz-conventional-changelog-mocha is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/09/04 6:31 a.m.•9 views

Malicious Package

Overview dampvulturez3n is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder