0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
fs-extra-core
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting fs-extra-core, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11027 | Unknown | Malicious code in fs-extra-core (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (397f5c6f4eb2cf734d5ee1afc9908bdd0162a91a2fc6ad6d7d51a5cfd22fdc41) Package impersonates fs-extra by copying its description, homepage (github.com/jprichardson/node-fs-extra), and repository metadata verbatim. Its exported outputFile() function ignores the documented (path, data) arguments and instead fetches a Windows executable from raw.githubusercontent.com/jason-code-super/axios/main/lib/env/axios.exe — a personal repository unrelated to the fs-extra publisher — and writes the binary to %LOCALAPPDATA%\T |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (397f5c6f4eb2cf734d5ee1afc9908bdd0162a91a2fc6ad6d7d51a5cfd22fdc41) Package impersonates fs-extra by copying its description, homepage (github.com/jprichardson/node-fs-extra), and repository metadata verbatim. Its exported outputFile() function ignores the documented (path, data) arguments and instead fetches a Windows executable from raw.githubusercontent.com/jason-code-super/axios/main/lib/env/axios.exe — a personal repository unrelated to the fs-extra publisher — and writes the binary to %LOCALAPPDATA%\T