Lucene search
+L

2 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•19 views

Malicious Package

Overview @touchvue/chat is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/20 4:42 a.m.•26 views

Malicious code in @touchvue/chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0921a05dced95d8d0bb5d99de362f67e4e67832874fb0b4391629f5dfe6e926d The published tarball's chat components AiChat/Chat/useSSE.js and AiChat/ChatInput.vue2.js ship with hardcoded defaults that point the chat backend a...

5.7AI score
SaveExploits0References3
Rows per page
Query Builder