Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/08/05 3:00 p.m.•4 views

Malware in tcb-web-images

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2026/08/05 12:37 p.m.•36 views

MAL-2026-12477 Malicious code in tcb-web-images (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4ea2872f88d974e66cc870c5fbfbf92294eb63026155a96bea567a096f4d69 On require'tcb-web-images', index.js loads helpers.js which immediately runs a setup routine that selects an OS/arch-specific URL path and downloads ...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 12:37 p.m.•35 views

Malicious code in tcb-web-images (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e4ea2872f88d974e66cc870c5fbfbf92294eb63026155a96bea567a096f4d69 On require'tcb-web-images', index.js loads helpers.js which immediately runs a setup routine that selects an OS/arch-specific URL path and downloads ...

5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•19 views

Malicious Package

Overview tcb-web-images is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
Rows per page
Query Builder