Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/08/07 12:31 a.m.•4 views

Malicious code in merchantweb-lang-cookie-reset (npm)

Source: amazon-inspector 5b095c93acc24b5979596513da816a08ab69de453c893e346f8c825985d3ec0b package.json and npm-shrinkwrap.json resolve the sole dependency packet-table-thread-stream to https://artifacts.yosiroute.com/npm/packet-table-thread-stream, a non-npm-registry host unrelated to the declare...

6AI score
SaveExploits0References13Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/06 4:15 p.m.•41 views

Malicious code in merchantweb-lang-cookie-reset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff16333aa7ffc7fc2c7decc1458c23b7d89f8caacb5c6129ba76168d08ec4be package.json declares the sole dependency packet-table-thread-stream as a direct tarball URL to a non-npm host...

5.3AI score
SaveExploits0References11
Rows per page
Query Builder