Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2026/09/29 5:31 p.m.•9 views

Malware in txs-lib-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/08/19 3:15 p.m.•29 views

Malicious Package

Overview txs-lib-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/08/19 3:31 a.m.•7 views

Malicious code in txs-lib-sdk (npm)

Source: amazon-inspector 5575013ead36c1ebb523009215200be0a1bf61d21285ca8515573963a63e3aa5 The package's advertised getTransactions API invokes an internal loader that reads database.js — a file disguised as a product catalog — extracts each record's mark field, base64-decodes it and applies a...

6.1AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/08/19 1:17 a.m.•30 views

MAL-2026-14198 Malicious code in txs-lib-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5575013ead36c1ebb523009215200be0a1bf61d21285ca8515573963a63e3aa5 The package's advertised getTransactions API invokes an internal loader that reads database.js — a file disguised as a product catalog — extracts eac...

5.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/19 1:17 a.m.•30 views

Malicious code in txs-lib-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5575013ead36c1ebb523009215200be0a1bf61d21285ca8515573963a63e3aa5 The package's advertised getTransactions API invokes an internal loader that reads database.js — a file disguised as a product catalog — extracts eac...

5.9AI score
SaveExploits0References3
Rows per page
Query Builder