0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
dzcvhfruwluwe
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting dzcvhfruwluwe, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13803 | Unknown | Malicious code in dzcvhfruwluwe (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (94746f13a653388ae268279888acdb3aceabbdbc5c7444e406af0dfb6317a6d9) The package's sole shipped file is index.html, a fake 'Cloudflare Verifying...' page containing an obfuscator.io-style script that reconstructs the URL https://lo<...>ofte.live/ and calls window.location.replace on a 1-second timeout to redirect the viewer to that external.live domain. package.json declares no lifecycle scripts and `main` points at the HTML file, so neither `npm install` nor `require()` executes the payload against the inst |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (94746f13a653388ae268279888acdb3aceabbdbc5c7444e406af0dfb6317a6d9) The package's sole shipped file is index.html, a fake 'Cloudflare Verifying...' page containing an obfuscator.io-style script that reconstructs the URL https://lo<...>ofte.live/ and calls window.location.replace on a 1-second timeout to redirect the viewer to that external.live domain. package.json declares no lifecycle scripts and `main` points at the HTML file, so neither `npm install` nor `require()` executes the payload against the inst