hydration-ui-dlx
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting hydration-ui-dlx, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-14577 | Unknown | Malicious code in hydration-ui-dlx (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e76afa004355ba53a89056c6daff511bb4f41e2bd666e2a5592d033e079e5740) The package's main module contains a top-level IIFE that chmods 0o755 and detached-spawns dist/internal/math-calc.mjs, which is a Linux x86_64 ELF executable rather than a JavaScript module. Simply importing the package launches the binary as a background process on the installer's host. The bundled implant contacts a hardcoded C2 at 217.60.77.63 and provides full post-exploitation capability: interactive remote shell (/redshell), fetch-and |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (e76afa004355ba53a89056c6daff511bb4f41e2bd666e2a5592d033e079e5740) The package's main module contains a top-level IIFE that chmods 0o755 and detached-spawns dist/internal/math-calc.mjs, which is a Linux x86_64 ELF executable rather than a JavaScript module. Simply importing the package launches the binary as a background process on the installer's host. The bundled implant contacts a hardcoded C2 at 217.60.77.63 and provides full post-exploitation capability: interactive remote shell (/redshell), fetch-and