Lucene search
+L

2 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/20 3:59 p.m.•5 views

Malicious code in unicode-title-normalizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b7fd66ab9bf639779e619823ab3eb75ee795206661fa0472331571e32196ab The package's npm install lifecycle script in package.json line 11 runs curl against a hardcoded webhook.site collector URL...

5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/10/20 3:59 p.m.•3 views

Malware in unicode-title-normalizer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder