Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/09 12:30 a.m.•20 views

Malicious code in xblaxw (npm)

Source: amazon-inspector 2d2e0b35582727d314517ea66b234f665258076783678cdf645075a7294a0aed [email protected] is a stub package whose only behavior is a beacon. The package.json postinstall script runs node beacon.cjs, which collects host identifiers hostname, install path, process.cwd, process.version...

5.9AI score
SaveExploits0References9Affected Software1
Snyk
Snyk
•added 2026/10/08 10:06 p.m.•11 views

Malicious Package

Overview xblaxw is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/10/08 9:19 p.m.•20 views

MAL-2026-17708 Malicious code in xblaxw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2e0b35582727d314517ea66b234f665258076783678cdf645075a7294a0aed [email protected] is a stub package whose only behavior is a beacon. The package.json postinstall script runs node beacon.cjs, which collects host...

5.9AI score
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/10/08 9:19 p.m.•17 views

Malicious code in xblaxw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2e0b35582727d314517ea66b234f665258076783678cdf645075a7294a0aed [email protected] is a stub package whose only behavior is a beacon. The package.json postinstall script runs node beacon.cjs, which collects host...

5.9AI score
SaveExploits0References7
Rows per page
Query Builder