Lucene search
+L

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/01 3:43 a.m.•29 views

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

5.6AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/08/01 3:43 a.m.•26 views

MAL-2026-11494 Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79a278016b87011ec1e810ce455d87ab6346a1045cc007e0155b204c8cc2532 test-dev-sync is a browser data stealer coupled to a remote-command backdoor. grabberuser.js enumerates Chrome/Chromium/Opera/Vivaldi profiles under...

5.6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/08/01 3:43 a.m.•26 views

Malicious Package

Overview test-dev-sync is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/01 3:43 a.m.•5 views

Malware in test-dev-sync

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder