2 matches found
Malicious Package
Overview tool-registry-scripts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
9.8CVSS5.8AI score
SaveExploits0References2
Embedded Malicious Code
Overview @dydxprotocol/v4-client-js is a malicious package. Versions of this package were compromised with malicious scripts in core registry files. Remediation Avoid using all malicious instances of the @dydxprotocol/v4-client-js package. Credit: Kush Pandya...
9.8CVSS5.3AI score
SaveExploits0References2
20