4 matches found
GHSA-FRXQ-V7FM-M4PV Malicious Package in requuest
All versions of requuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...
9.8CVSS6.8AI score
SaveExploits0References1
20