Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-36693 Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

7.2AI score
Exploits0
Github Security Blog
Github Security Blog
added 2020/09/11 9:16 p.m.40 views

Malicious Package in test-module-a

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own any...

1AI score
Exploits0References2Affected Software1
Node.js
Node.js
added 2019/06/06 6:10 p.m.11 views

Malicious Package

Overview All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you...

6.9AI score
Exploits0Affected Software1
Veracode
Veracode
added 2017/11/01 6:53 a.m.10 views

Malicious Module

pandora-doomsday and test-module-a are modules which can infect other modules. During installation, the module runs a postinstall script that adds the package's author mr-robot as an owner to every other package owned by the user that ran the npm install method...

9.8CVSS9.1AI score0.0032EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder