0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
amprem
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting amprem, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17815 | Unknown | Malicious code in amprem (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (61910a4032ec54fa4fc9563754df94a67c45a324a3fb6210d51cb0f03d2b0a07) amprem@0.0.2 is advertised as an 'API Scraper untuk Alight Motion Premium Activator' targeting the third-party service alight-motion-premium.site.je (AES-128-CBC cookie bypass for premium license activation). lib/api.js and lib/aes.js are heavily obfuscated using a custom XOR string-table decoder with zero-width/hidden-Unicode variable names, and run a top-level async IIFE at require() time. The IIFE resolves `require`, `await import("modul |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (61910a4032ec54fa4fc9563754df94a67c45a324a3fb6210d51cb0f03d2b0a07) amprem@0.0.2 is advertised as an 'API Scraper untuk Alight Motion Premium Activator' targeting the third-party service alight-motion-premium.site.je (AES-128-CBC cookie bypass for premium license activation). lib/api.js and lib/aes.js are heavily obfuscated using a custom XOR string-table decoder with zero-width/hidden-Unicode variable names, and run a top-level async IIFE at require() time. The IIFE resolves `require`, `await import("modul