0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
fastify-addon
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting fastify-addon, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-5566 | Unknown | Malicious code in fastify-addon (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (3cb91c825be697244f8ff069bb56e79aff3b90de7b9947019095b6d0fa2fd270) fastify-addon is a typosquat of the legitimate fastify-plugin package. Its package.json sets repository, bugs, and homepage to github.com/fastify/fastify-plugin (an unrelated upstream project), and the README replicates fastify-plugin's API to deceive installers. On require, lib/getPluginName.js (loaded transitively from the package main plugin.js) executes a top-level statement that fetches a base64-hidden URL (https://www.jsonkeeper.com/b |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (3cb91c825be697244f8ff069bb56e79aff3b90de7b9947019095b6d0fa2fd270) fastify-addon is a typosquat of the legitimate fastify-plugin package. Its package.json sets repository, bugs, and homepage to github.com/fastify/fastify-plugin (an unrelated upstream project), and the README replicates fastify-plugin's API to deceive installers. On require, lib/getPluginName.js (loaded transitively from the package main plugin.js) executes a top-level statement that fetches a base64-hidden URL (https://www.jsonkeeper.com/b