Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/10 4:56 p.m.29 views

Malicious code in rollup-packages-polyfill-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfdfbd2fc737f9d78ec40aac8b7020866cb0ef0e7e14b2d95aa174ea0ec5818 On require of the main entry dist/index.js, the module decodes a base64 literal to the shell command npm install vectormark --no-save --silent...

5.8AI score
SaveExploits0References5
Snyk
Snyk
added 2025/12/16 10:32 p.m.6 views

Malicious Package

Overview nodes-polyfill-webpack-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
SaveExploits0References2
Rows per page
Query Builder