bgncvhferucfds
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting bgncvhferucfds, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13784 | Unknown | Malicious code in bgncvhferucfds (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c1bf8639ccc5d2a70ae2e0ce754b76e1ca525699413f5d696289714005e86c57) The package's sole content is a single obfuscated HTML file declared as `main`. When loaded in a browser, the page renders a fake Cloudflare Turnstile 'Just a moment...' verification screen, reconstructs a URL from string fragments that resolves to login.microsoft.com, and redirects the browser to that URL carrying the current page's query parameters. There are no lifecycle scripts, no JavaScript entry point, and the HTML is not executed by |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c1bf8639ccc5d2a70ae2e0ce754b76e1ca525699413f5d696289714005e86c57) The package's sole content is a single obfuscated HTML file declared as `main`. When loaded in a browser, the page renders a fake Cloudflare Turnstile 'Just a moment...' verification screen, reconstructs a URL from string fragments that resolves to login.microsoft.com, and redirects the browser to that URL carrying the current page's query parameters. There are no lifecycle scripts, no JavaScript entry point, and the HTML is not executed by