Lucene search
+L

4 matches found

Snyk
Snyk
•added 2026/09/16 9:30 a.m.•14 views

Malicious Package

Overview strapi-plugin-pencc-meeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/16 9:30 a.m.•3 views

Malicious code in strapi-plugin-pencc-meeb (npm)

Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded string 'ubuntu-fc-uvm' and, on a match, executes bash -c "bash...

5.9AI score
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/16 6:29 a.m.•33 views

Malicious code in strapi-plugin-pencc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded stri...

5.7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/09/16 6:29 a.m.•14 views

MAL-2026-16210 Malicious code in strapi-plugin-pencc-meeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4277c223cb7d5a9b8c263570a18670ee5054779862fbb801024a55629aa208 postinstall.js is registered as the package's postinstall script and runs automatically on npm install. It compares os.hostname to the hardcoded stri...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder