Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/07/14 11:21 p.m.•13 views

Malicious Package

Overview path-addon-extend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/07/14 11:21 p.m.•3 views

Malware in path-addon-extend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/13 5:37 p.m.•42 views

Malicious code in node-path-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbc52a88818bccd5602eb556ea4bf089dac66c44a2bb1ecbd6fddd6723e9d1d node-path-addon presents itself as an extension of the Node.js built-in 'path' module. Its main entry path.js delegates by executing...

6.5AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/13 6:59 a.m.•38 views

Malicious code in path-addon-extend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b383636076e2701a372675c281ee82463d97529ed7d8db027276aa8a8b68b966 path-addon-extend presents itself as a copy of Node's built-in path module. On module load, path.js issues an HTTPS GET to a base64-obscured URL that...

6.5AI score
SaveExploits0References4
Rows per page
Query Builder