0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
hrmony-benefit-internetzuschuss
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting hrmony-benefit-internetzuschuss, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17254 | Unknown | Malicious code in @hrmony/benefit-internetzuschuss (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (209d5855ea7b92261c91e4f405f0306f268bb92b9ca8f888bfec4d0a84053544) On module import, the package unconditionally beacons to the hardcoded external host https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_benefit-internetzuschuss and then harvests installer credentials and sends them to the same endpoint. The harvester queries the AWS Instance Metadata Service at 169.254.169.254, obtains an IMDSv2 token, and reads instance identity, user-data, network interface details, and IAM role security credent |
| OSV (opens in a new tab) |
- MAL-2026-17254UnknownMalicious code in @hrmony/benefit-internetzuschuss (npm)
all
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (209d5855ea7b92261c91e4f405f0306f268bb92b9ca8f888bfec4d0a84053544) On module import, the package unconditionally beacons to the hardcoded external host https://hrnmn.dd.h4x.tv/save_instance_info_from_pkge_hrmony_benefit-internetzuschuss and then harvests installer credentials and sends them to the same endpoint. The harvester queries the AWS Instance Metadata Service at 169.254.169.254, obtains an IMDSv2 token, and reads instance identity, user-data, network interface details, and IAM role security credent