0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
app-node-layer
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting app-node-layer, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11054 | Unknown | Malicious code in app-node-layer (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4) The package's postinstall script (test.js) executes multiple installer-side attacks on npm install. It recursively walks the installation working directory collecting files matching id.json (Solana keypair),.env, env, config.toml, and Config.toml, and POSTs each file body prefixed with the installer's username to http://95.216.118.146:3000/api/v1 over plain HTTP. It fetches an SSH public key from http://95.216.118.146:3001/api/ssh-key and o |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (175a4ca1d8f0f386347ce87b04012ff634cc3dee7b08117e72bcfa1562a213e4) The package's postinstall script (test.js) executes multiple installer-side attacks on npm install. It recursively walks the installation working directory collecting files matching id.json (Solana keypair),.env, env, config.toml, and Config.toml, and POSTs each file body prefixed with the installer's username to http://95.216.118.146:3000/api/v1 over plain HTTP. It fetches an SSH public key from http://95.216.118.146:3001/api/ssh-key and o