Lucene search
+L

3 matches found

Snyk
Snyk
•added 2026/07/27 11:00 p.m.•19 views

Malicious Package

Overview tree-sitter-forth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.5AI score
SaveExploits0References2
OSV
OSV
•added 2026/06/23 2:10 p.m.•15 views

MAL-2026-6297 Malicious code in tree-sitter-forth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f52e13ffb66b20f7c3dca7022e8115dbce1f39264638d38b73d6488e4cbf27 Package is a dependency-confusion lure: it claims version 9999.99.99 with description 'npm 404 error referenced in AlexanderBrevig/tree-sitter-forth'...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/23 2:10 p.m.•17 views

Malicious code in tree-sitter-forth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f52e13ffb66b20f7c3dca7022e8115dbce1f39264638d38b73d6488e4cbf27 Package is a dependency-confusion lure: it claims version 9999.99.99 with description 'npm 404 error referenced in AlexanderBrevig/tree-sitter-forth'...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder