Lucene search
K

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/10 7:7 a.m.2 views

Malicious code in @genoma-ui/components (npm)

Malicious package detected. It uses pre/post install scripts to download/execute code and exfiltrate user data via curl from a hardcoded IP. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb9acd5bf2a73c82be9ac19b7c0cad285cfea2a4b6ff69655f61e7e4a0c26c The...

5.8AI score
Exploits0References1
OSV
OSV
added 2026/04/10 7:7 a.m.1 views

MAL-2026-2823 Malicious code in @genoma-ui/components (npm)

Malicious package detected. It uses pre/post install scripts to download/execute code and exfiltrate user data via curl from a hardcoded IP. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fb9acd5bf2a73c82be9ac19b7c0cad285cfea2a4b6ff69655f61e7e4a0c26c The...

5.8AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/12/23 11:52 p.m.7 views

Strengthening supply chain security: Preparing for the next malware campaign

The open source ecosystem continues to face organized, adaptive supply chain threats that spread through compromised credentials and malicious package lifecycle scripts. The most recent example is the multi-wave Shai-Hulud campaign. While individual incidents differ in their mechanics and speed,...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/22 9:13 p.m.3 views

Malicious code in pre-and-postinstall-scripts-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4994e0104f427d4e6ac062c0ec26e609127db5c43b703a286194e39d36ae9e9 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References1
Veracode
Veracode
added 2019/06/06 6:22 a.m.8 views

Malicious Package

angluar-cli is a malicious package. It contains malicious codes in its post-install scripts which attempt to remove files and stop processes related to McAfee antivirus on macOS...

6.6AI score
Exploits0
Veracode
Veracode
added 2019/06/06 6:14 a.m.17 views

Malicious Package

font-scrubber is a malicious package. It contains malicious codes in its post-install scripts, attempting to upload sensitive files including configuration files, command history logs, SSH keys and /etc/passwd to a remote server...

6.9AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/11/26 12:0 a.m.40 views

OracleVM 2.1 : kernel (OVMSA-2008-2009)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update post install scripts to properly set default boot kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

5.5AI score
Exploits0References1
Rows per page
Query Builder