Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/11 3:31 p.m.•9 views

Malicious code in some-very-long-package-name (npm)

Source: amazon-inspector 1ce120698c1be7e98866ccdff0987f7b77f53377e525284f311363b79f5ea397 Package ships a postinstall lifecycle hook node beacon.cjs and a top-level require'./beacon.cjs'.fire call in index.js, so both npm install and any require of the package trigger an outbound HTTP POST to the...

5.9AI score
SaveExploits0References8Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/11 1:54 p.m.•4 views

Malicious code in some-very-long-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c08ea2abb307f6ecb9a1896fcc3980e9a1eaf8b29044db67cd985654e1db16 The package is a stub whose main module exports a Proxy that returns a no-op for every property access, providing none of the functionality implied b...

5.9AI score
SaveExploits0References5
Rows per page
Query Builder