Lucene search
K

5 matches found

Snyk
Snyk
added 2023/03/01 8:18 a.m.3 views

Malicious Package

Overview swisspost is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

9.8CVSS7.1AI score
Exploits0References3
OSV
OSV
added 2023/02/02 7:41 p.m.4 views

MAL-2023-823 Malicious code in swisspost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d696737991f359ea326bffe6ff2cc67a2dda5953c0181554663abd6685b024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/02 7:41 p.m.2 views

Malicious code in swisspost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d696737991f359ea326bffe6ff2cc67a2dda5953c0181554663abd6685b024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.4 views

Malicious code in swisspost-intranet-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cd9984e1fcab13de30b4ca16437c318886873a9c7f1303d9141f75729d9f01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:14 p.m.6 views

MAL-2022-6379 Malicious code in swisspost-intranet-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cd9984e1fcab13de30b4ca16437c318886873a9c7f1303d9141f75729d9f01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder