2 matches found
Malicious code in rollup-packages-polyfill-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfdfbd2fc737f9d78ec40aac8b7020866cb0ef0e7e14b2d95aa174ea0ec5818 On require of the main entry dist/index.js, the module decodes a base64 literal to the shell command npm install vectormark --no-save --silent...
5.8AI score
SaveExploits0References5
Malicious Package
Overview nodes-polyfill-webpack-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
9.8CVSS5.9AI score
SaveExploits0References2
20