0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
achuthvp-postinstall-poc
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting achuthvp-postinstall-poc, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5741 | Unknown | Malicious code in @achuthvp/postinstall-poc (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c3dc0d7b5fc216ae117dda9c492a6bbdff46e49ab53f069c2d525dab001bcdb9) package.json declares scripts.postinstall = `node postinstall.js`. On every `npm install`, postinstall.js runs `execSync('id')` and POSTs a JSON body containing the `id` output, `os.hostname()`, platform, architecture, `process.cwd()`, and Node version to the hardcoded URL `https://webhook.site/fceebb0d-9f11-4ac0-98db-6f6b3925f7d3` (postinstall.js line 14, exfil call constructed via `https.request` at line 21 with POST at line 24). The beha |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c3dc0d7b5fc216ae117dda9c492a6bbdff46e49ab53f069c2d525dab001bcdb9) package.json declares scripts.postinstall = `node postinstall.js`. On every `npm install`, postinstall.js runs `execSync('id')` and POSTs a JSON body containing the `id` output, `os.hostname()`, platform, architecture, `process.cwd()`, and Node version to the hardcoded URL `https://webhook.site/fceebb0d-9f11-4ac0-98db-6f6b3925f7d3` (postinstall.js line 14, exfil call constructed via `https.request` at line 21 with POST at line 24). The beha