Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/09/09 9:33 a.m.•10 views

Malicious code in server-authorized-cleanup (npm)

Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint https://testback-2aqe.onrender.com/can-cleanup authenticated with a hardcoded x-api-key header and,...

6AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/09 6:54 a.m.•40 views

Malicious code in server-authorized-cleanup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/09 6:54 a.m.•24 views

MAL-2026-16079 Malicious code in server-authorized-cleanup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba50dd2c597a65e5fa5bd8aa2675ac16fb443c6d42381921fde160c9596f44d2 server-authorized-cleanup exposes triggerCleanup which issues an HTTPS GET to the hardcoded author endpoint...

5.8AI score
SaveExploits0References1
Snyk
Snyk
•added 2026/09/09 6:31 a.m.•13 views

Malicious Package

Overview server-authorized-cleanup is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instance...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder