Lucene search
+L
OssfMost viewed

237246 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack2ya7xz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ec140101b3ad54acbf20f16a8843b05edecdcfc31d85216e1ca20ad32e4db94 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackwm7sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09f2a4c880e58c67df785ecf72d15c1e802e81dbc3a09e51d8b78ace97c0188a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack4ib1jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0911c1965ce4e90d0a160696bb4ef7a0b71efe7fac6c29f42fb97cb8d564ab The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack9riv6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3219007f88ea611b59f13d44f4dc5fea032b355916431ac597a02ba6abd9c4b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack5cwu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2c440b4cdcdfcd5b237b8c1ca8f874e292c3cd46e9d718752f45b778d2b4c96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack9umzt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a064f4fed0f0ca889db50b132564edd03fbfeb31dcfc97c6425f21cc32a8b4a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack1ccrm9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a3be227db8cbc6173f4472a137d82782db598d478a81bcf20d3cedb100f5ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstacklbxr4c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcfd4a4cf4a28968e7bccfc0f95a183efa393ca06df77d428321e6d802d0ce8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack3psj0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 208c729fc790c687206c3d92deb35055959c3ce8fd73dc3e19cdccb165c42404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackykuowv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b35e713a652f02ee5277c5957f3c2ad5b48066dc7148986d88a5eb9d89d6ac The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack5vpco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7f6e539028bc60b1b035b1f56a075db641a49fb092fbf7f1ee859210925e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackodswc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b02ec6378a22e759dcdcaa22a447de9b867ce90b41ab4e05b559b952805da4d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackjw2t3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7be43e476bf5c931001c113eb95dac898bd4c1bf48428de5f31a38fc3bb4ccde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackjdbrp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44e321ad9963565dfa9b1afc7687ff7adf07796f17371db892c4eb3dd0013e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackoo1jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cff13cc70884293e7d0fa87cfb87acdaa15045b80bfbc5d931a3c9738567be7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackpmw72s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355c72dd19a7ffb5a71ee10c292b3cfa041143e01126c565900b12e69b8b2ff6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstacklbpy50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb23bf8f8ca00222600f4a54f94a64da914d8d3d0306e3fce12a136a26062a0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackd80ved (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402d3974f83ba7aa9c3a6d36d2cc877d0bd7487615685b2260edb759130ea8d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackcnxrzk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7983dc45d187d75a919b408f8abe12b195883830ec4f090766882a93e925daf1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackcjddnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f570311b982469189c0f9d6222fe75dccbb9813a993b3f5f1be896dd3629bd7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstacku2axz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 995bfd34e4f6903002a7006f95f860448f69d48743dc85dad61f7c8ea34f7dd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackbz1nv9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f476e04aa8223211da688c991805ba888578ea3b1dcefd32c455e7c7cf24f6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackp4yyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f8ac522f4af3c94f5c7224d72eeb488ffd9cfcce465b5308bce689140631706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack04tdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a2002b2232ea0011c14986dddaf7f4b6137a943248bddb10fcd1b85275c61d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack6wih1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa5a08318698247887c6c57e5b4d9196461f5f3c507f5269102fcfe94631fdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackckdy9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6e7e6c6aef32c457bf0b4f804fc9c1665e88ac53ce69f997b185507470a50ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackplila (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e367240009d8da30f1a2df29c2e467497a8d67694dae4afe7b077bfcab8d0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackz54iek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3c129e32b1631acf1a55cd98b598188478b8227b63d532a23f2d7360e5b6e7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstackl21ibf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc6ccc6467814c4ddf095d64904d3b0d2f475dbcd599ddcf02f43329cbdbf49 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack7eu4ry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b496fea6a07dc489b25eead6f3cad8b8f63e4aa99697f91cd2f71cbb3447e61 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack8xhwdm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb57760067d22b8d95fed83ab820f3c63a22e6f7f8d08a1d2fa9bef5810259f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in 3layerdipstack9vcxi9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f58776216430f09975c1f3b1490eb904f7ca314f6e61e84113272ff0bd32883 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in desmos-graphing-d2xe9mki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbeec1306190d160052a57776b8df3c00b2dfa95e6854caa31f727407344a05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in desmos-graphing-0uw2z1ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a350af2f316c5638cb4fab142b90162fa9a50ded929a5b46b18c642a3f3a4f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in classlink-kr6i9ei3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07376181b97b4aca289fec2da07a5eaeabf904e2a28f0028c0ce5a2eb6b6f78a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in desmos-graphing-mh7e6p9s (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6abba49e88b1e1522283409832cba76f27dfab851997665f4a7df86a60c8e80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in secure-test-browser-uhdrf7v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f58b067c3d6e63d5ac647c682c28315ac8435746925d7cde116c413b03a4f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in secure-test-browser-zystijl5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3dbbbbc8d2df8855e53e35f78f25e8db616091e9656548d3f838b6c487b2f90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/28 3:35 p.m.•28 views

Malicious code in secure-test-browser-fb1mhg79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d43f3f1928276445de21e37dbd2c2b036161c9b2350200bbc45009256521a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 4:46 p.m.•28 views

Malicious code in kelly-stake-sizing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca23e704ca44d185fc873044a3a967e06d996970f59a526d3390e1f0ab45a9d [email protected] declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from...

6.1AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 4:44 p.m.•28 views

Malicious code in remove-bg-serverless-azure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbce8344eb0762c4a9ef029743efe13045422b839444b828c245a09a85fc74e package.json declares preinstall: node index.js, so npm install automatically runs index.js. index.js reads os.hostname, os.userInfo, the user home...

5.6AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 4:44 p.m.•28 views

Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 4:39 p.m.•28 views

Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/24 8:04 a.m.•28 views

Malicious code in multyproccess (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7938a109a642dfe8b161e9568d6373a038c3413c0fd1f2b01702f4f173348553 The package's setup.py overrides the install and develop cmdclass to base64-decode a bundled request/.payload file and launch it via...

5.8AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/23 3:21 a.m.•28 views

Malicious code in 8-fetchsight-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e6a4c6ee9a60609bc1a9e9f1eccfa2166aaf106ba50c35d51aac34ecb3f549 index.js and index.html contain a top-level IIFE that fetches https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameWebSight, parses the respons...

6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 12:25 p.m.•28 views

Malicious code in totp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cebaa0a3370c12104ef2816420193171f431df0d113fdc5d8c9f1dc921deeb5 Package advertises itself as a TOTP utility but its postinstall script node./index.js --setup 2/dev/null || true and its exported validateSecret API...

5.7AI score
SaveExploits0References9
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 10:33 a.m.•28 views

Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

6.5AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 4:19 a.m.•28 views

Malicious code in moidevy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eac79904b327f6508820c84c1350dd1bef3fc43eaf6e61d826f17ed5981d664 main.js imports childprocess and issues POST requests to a hardcoded endpoint at https://ipc.shadxino.internal referenced at lines 358 and 452, with...

5.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 3:56 a.m.•28 views

Malicious code in express-session-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e94450f5541b39d8310a8b640dee027b0970db6e7cf724352726d49393bfb77 The package advertises itself as an Express session middleware but on module load unconditionally invokes an initPlugin routine in index.js that...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/21 3:48 a.m.•28 views

Malicious code in chai-as-soul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244e923b668eb903bcc217cb1eda26ce2227f37bd14abc3699d60c222c4f4e62 [email protected] is a typosquat/repackage of pino: LICENSE, README, docs, and lib/ are copied from pinojs/pino, package.json description is unrelat...

6.6AI score
SaveExploits0References2
Total number of security vulnerabilities5000