Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/22 1:29 a.m.20 views

Malicious code in @usealloy/api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2459ced40bf7d07428205c0322e09c951fdc50972f337b30508ad2ad867b37 The package @usealloy/api-contract was found to contain malicious code. Source: ghsa-malware...

5.7AI score
SaveExploits0References1
Snyk
Snyk
added 2026/04/22 1:29 a.m.4 views

Malicious Package

Overview @usealloy/api-contract is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

9.8CVSS5.4AI score
SaveExploits0References2
OSV
OSV
added 2026/04/22 1:29 a.m.13 views

MAL-2026-2969 Malicious code in @usealloy/api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2459ced40bf7d07428205c0322e09c951fdc50972f337b30508ad2ad867b37 The package @usealloy/api-contract was found to contain malicious code. Source: ghsa-malware...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder