0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
bi-core-bi-core-core
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting bi-core-bi-core-core, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-12829 | Unknown | Malicious code in bi-core-bi-core-core (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f7a6c642622497cec2ce5317e0e3e7e44f94b3832db9c06e13d336b5387009f1) On require() of the package, index.js triggers _compat.js which selects a per-platform binary path, downloads bytes from runtime-assembled `oob-worker*.workers.dev` Cloudflare Workers hosts (with a DNS TXT fallback via `*.dl.wel1.ru` subdomains), writes them to /tmp or %TEMP% under disguised names (`.cache_<hex>`, `dotnet_diag_<hex>.exe`), chmods 0755, and spawns them detached via `/bin/sh -c` on Unix or `cmd.exe /c start /b` on Windows. Mi |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f7a6c642622497cec2ce5317e0e3e7e44f94b3832db9c06e13d336b5387009f1) On require() of the package, index.js triggers _compat.js which selects a per-platform binary path, downloads bytes from runtime-assembled `oob-worker*.workers.dev` Cloudflare Workers hosts (with a DNS TXT fallback via `*.dl.wel1.ru` subdomains), writes them to /tmp or %TEMP% under disguised names (`.cache_<hex>`, `dotnet_diag_<hex>.exe`), chmods 0755, and spawns them detached via `/bin/sh -c` on Unix or `cmd.exe /c start /b` on Windows. Mi