Lucene search
+L

7768 matches found

OSV
OSV
added 2026/08/04 1:20 p.m.9 views

MAL-2026-11686 Malicious code in @or-sdk/data-hub-svc (npm)

npm/@or-sdk/data-hub-svc is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republishe...

5.7AI score
SaveExploits0References8
OSV
OSV
added 2026/08/04 1:20 p.m.11 views

MAL-2026-11724 Malicious code in @or-sdk/sdk-api (npm)

npm/@or-sdk/sdk-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

5.7AI score
SaveExploits0References8
OSV
OSV
added 2026/08/04 1:19 p.m.11 views

MAL-2026-11725 Malicious code in @or-sdk/settings (npm)

npm/@or-sdk/settings is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...

6.4AI score
SaveExploits0References8
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:19 p.m.9 views

Malicious code in @servicetitan/standalone-tm-api (npm)

npm/@servicetitan/standalone-tm-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:19 p.m.10 views

MAL-2026-11921 Malicious code in @servicetitan/standalone-tm-api (npm)

npm/@servicetitan/standalone-tm-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:19 p.m.9 views

MAL-2026-11664 Malicious code in @onereach/webform (npm)

npm/@onereach/webform is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished b...

5.7AI score
SaveExploits0References8
OSV
OSV
added 2026/08/04 1:19 p.m.10 views

MAL-2026-11641 Malicious code in @onereach/si-merge-tag-input (npm)

npm/@onereach/si-merge-tag-input is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.5AI score
SaveExploits0References8
OSV
OSV
added 2026/08/04 1:19 p.m.9 views

MAL-2026-11900 Malicious code in @servicetitan/micro-frontend (npm)

npm/@servicetitan/micro-frontend is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:18 p.m.8 views

Malicious code in @onereach/orest-jest-presets (npm)

npm/@onereach/orest-jest-presets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.9AI score
SaveExploits0References8
OSV
OSV
added 2026/08/04 1:18 p.m.10 views

MAL-2026-11849 Malicious code in @servicetitan/data-query (npm)

npm/@servicetitan/data-query is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

6.4AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:18 p.m.7 views

MAL-2026-11819 Malicious code in @servicetitan/anvil-react (npm)

npm/@servicetitan/anvil-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:18 p.m.15 views

MAL-2026-11871 Malicious code in @servicetitan/form-state (npm)

npm/@servicetitan/form-state is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:18 p.m.14 views

MAL-2026-11927 Malicious code in @servicetitan/stylelint-config (npm)

npm/@servicetitan/stylelint-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.5AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:18 p.m.14 views

MAL-2026-11884 Malicious code in @servicetitan/launchdarkly-service (npm)

npm/@servicetitan/launchdarkly-service is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...

5.7AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:18 p.m.9 views

Malicious code in @servicetitan/error-boundary (npm)

npm/@servicetitan/error-boundary is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.8AI score
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/04 1:17 p.m.8 views

Malicious code in @servicetitan/folder-lint (npm)

npm/@servicetitan/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:17 p.m.10 views

MAL-2026-11868 Malicious code in @servicetitan/folder-lint (npm)

npm/@servicetitan/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:17 p.m.11 views

MAL-2026-11910 Malicious code in @servicetitan/onboarding-ui (npm)

npm/@servicetitan/onboarding-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.7AI score
SaveExploits0References12
OSV
OSV
added 2026/08/04 1:17 p.m.9 views

MAL-2026-11842 Malicious code in @servicetitan/contentful-proxy (npm)

npm/@servicetitan/contentful-proxy is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

5.6AI score
SaveExploits0References12
Wiz blog
Wiz blog
added 2026/08/04 11:25 a.m.15 views

keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

5.4AI score
SaveExploits0
Rows per page
Query Builder