0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
hydration-dim-ui
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting hydration-dim-ui, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-14430 | Unknown | Malicious code in hydration-dim-ui (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b) hydration-dim-ui@1.0.0 presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's dist/internal/math-calc.dat and spawns it detached. math-calc.dat is a Linux x86_64 ELF implant (self-labeled 'RedShell' / 'SECURE_BEACON') that connects to hardcoded C2 217.60.77.63 to provide an interactive reverse shell, bulk file exfiltration via 'POST /api/extract-receive HTTP/1.1' framed with BI |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b) hydration-dim-ui@1.0.0 presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's dist/internal/math-calc.dat and spawns it detached. math-calc.dat is a Linux x86_64 ELF implant (self-labeled 'RedShell' / 'SECURE_BEACON') that connects to hardcoded C2 217.60.77.63 to provide an interactive reverse shell, bulk file exfiltration via 'POST /api/extract-receive HTTP/1.1' framed with BI