CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Github Security Blog•added 2026/07/27 11:00 p.m.•4 views

Malicious code in zer0onedate (npm)

Source: amazon-inspector 106494bfe4420962c30d8b3989a1397d197f277079c71b8d15695c9128d72399 On npm install, postinstall.js executes a chain of curl commands that read cloud instance metadata service IMDS endpoints — AWS 169.254.169.254/latest/meta-data/iam/security-credentials/, Alibaba/Aliyun and...

5.9AI score

SaveExploits0References4Affected Software1

osv_mal•added 2026/06/10 11:55 p.m.•44 views

MAL-2026-5535 Malicious code in zer0onedate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106494bfe4420962c30d8b3989a1397d197f277079c71b8d15695c9128d72399 On npm install, postinstall.js executes a chain of curl commands that read cloud instance metadata service IMDS endpoints — AWS...

5.5AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/06/10 11:55 p.m.•35 views

Malicious code in zer0onedate (npm)

5.5AI score

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by