2 matches found
Malicious Package
Overview starship-timeline is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
9.8CVSS5.8AI score
SaveExploits0References2
Malicious code in starship-timeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4e552337fa70064e0a04644ee5a64378809a85b281eda24707bc9a6eba473f [email protected] ships no real functionality. Its package.json declares a preinstall hook "preinstall": "node index.js" that runs automaticall...
5.6AI score
SaveExploits0References3
20