0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
alimama-minisite
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting alimama-minisite, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15495 | Unknown | Malicious code in alimama-minisite (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e3efd48d631afe828271bb266e4ddb8f2f6d0a8305294f56bde57d614c1cbfef) package.json declares a self-named dependency alimama-minisite whose value is the off-registry URL https://repo.securityctrl.com/alimama-minisite instead of a semver range from the npm registry. On npm install, npm fetches whatever bytes that host returns and installs them, executing any lifecycle scripts contained in the fetched artifact. The dependency is unpinned and has no integrity check, so the returned content can change at any time. |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e3efd48d631afe828271bb266e4ddb8f2f6d0a8305294f56bde57d614c1cbfef) package.json declares a self-named dependency alimama-minisite whose value is the off-registry URL https://repo.securityctrl.com/alimama-minisite instead of a semver range from the npm registry. On npm install, npm fetches whatever bytes that host returns and installs them, executing any lifecycle scripts contained in the fetched artifact. The dependency is unpinned and has no integrity check, so the returned content can change at any time.