0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
file-saver-bg
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting file-saver-bg, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18797 | Unknown | Malicious code in file-saver-bg (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dc60a9083c9eef36fa2df3fbf6f9123aea7ddcf1f244b28ce480f8440d0c6380) file-saver-bg@9.9.9 is a dependency-confusion-shaped package (name resembles 'file-saver', implausibly high version 9.9.9 to win internal resolution) whose package.json declares both preinstall and postinstall lifecycle scripts invoking beacon.js. beacon.js collects os.hostname(), os.userInfo().username, process.cwd(), and os.platform() and transmits them as query parameters in an HTTP GET to the hardcoded bare-IP endpoint http://100.24.177 |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dc60a9083c9eef36fa2df3fbf6f9123aea7ddcf1f244b28ce480f8440d0c6380) file-saver-bg@9.9.9 is a dependency-confusion-shaped package (name resembles 'file-saver', implausibly high version 9.9.9 to win internal resolution) whose package.json declares both preinstall and postinstall lifecycle scripts invoking beacon.js. beacon.js collects os.hostname(), os.userInfo().username, process.cwd(), and os.platform() and transmits them as query parameters in an HTTP GET to the hardcoded bare-IP endpoint http://100.24.177