Lucene search
+L

2 matches found

Snyk
Snyk
added 2026/04/22 1:54 a.m.4 views

Malicious Package

Overview trackora-chain is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/15 10:5 p.m.12 views

Malicious code in trackora-chain (npm)

trackora-chain is a malicious npm package that when imported downloads a C2 dropper from https://jsonkeeper.com/b/BADC6 and executes it similar to malware in to chai-await-test. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector...

5.7AI score
SaveExploits0References3
Rows per page
Query Builder