Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/29 4:50 a.m.14 views

Malicious code in @thone33/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05561d1a31165dab72c5090437ccfa7a85035a2b4fdf6a646eca59b62dd87120 @thone33/core-utils 1.0.4 is a loader stub. Its main entry index.js imports activate from the same-author dependency @thone33/analytics-injector and...

6.1AI score
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/16 11:54 a.m.12 views

Malicious code in @jaime9008/math-service (npm)

Package classified as malware due to code obfuscation, use of eval for code execution, and a low number of published versions. The file lib/lib.js contains same obfuscated malware dropler as malicious react-refresh-update package, the author is same for both pacakge. --- -= Per source details. Do...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/03/16 11:54 a.m.5 views

MAL-2026-1483 Malicious code in @jaime9008/math-service (npm)

Package classified as malware due to code obfuscation, use of eval for code execution, and a low number of published versions. The file lib/lib.js contains same obfuscated malware dropler as malicious react-refresh-update package, the author is same for both pacakge. --- -= Per source details. Do...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder