Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•6 views

Malicious code in share-anything-cli (npm)

Source: amazon-inspector 290f9dadaf589349dd8a7c641450aca713a6ead63b2ba685c15e4e6a37ab3b07 The package's package.json declares a postinstall lifecycle hook "postinstall": "node install.js" that runs install.js automatically on npm install. install.js requires childprocess and https, gathers host...

5.9AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•16 views

Malicious Package

Overview share-anything-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/22 1:21 p.m.•29 views

Malicious code in share-anything-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290f9dadaf589349dd8a7c641450aca713a6ead63b2ba685c15e4e6a37ab3b07 The package's package.json declares a postinstall lifecycle hook "postinstall": "node install.js" that runs install.js automatically on npm install...

5.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/05/22 1:21 p.m.•30 views

MAL-2026-4668 Malicious code in share-anything-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290f9dadaf589349dd8a7c641450aca713a6ead63b2ba685c15e4e6a37ab3b07 The package's package.json declares a postinstall lifecycle hook "postinstall": "node install.js" that runs install.js automatically on npm install...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder