Lucene search
+L

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-36693 Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2020/09/11 9:16 p.m.49 views

Malicious Package in test-module-a

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own any...

1AI score
SaveExploits0References2Affected Software1
nodejs
nodejs
added 2019/06/06 6:10 p.m.15 views

Malicious Package

Overview All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you...

6.9AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2017/11/01 6:53 a.m.18 views

Malicious Module

pandora-doomsday and test-module-a are modules which can infect other modules. During installation, the module runs a postinstall script that adds the package's author mr-robot as an owner to every other package owned by the user that ran the npm install method...

9.8CVSS9.1AI score0.01455EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder