0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
iot-kfh-s3
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting iot-kfh-s3, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10921 | Unknown | Malicious code in iot-kfh-s3 (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1c402827c1e00592a8936a9304c2cccc45189126fc447038f67350a8a9124c81) The package's `preinstall` script executes `node examples/verify.js`, which initializes Sentry against a hardcoded author-controlled DSN at `o4510485815754752.ingest.us.sentry.io/4511632673275909` with `sendDefaultPii: true`, resolves the installer's public IP via `https://www.cloudflare.com/cdn-cgi/trace`, and deliberately triggers a captured exception so Sentry ships an event carrying the installer's public IP, `server_name`, username, an |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1c402827c1e00592a8936a9304c2cccc45189126fc447038f67350a8a9124c81) The package's `preinstall` script executes `node examples/verify.js`, which initializes Sentry against a hardcoded author-controlled DSN at `o4510485815754752.ingest.us.sentry.io/4511632673275909` with `sendDefaultPii: true`, resolves the installer's public IP via `https://www.cloudflare.com/cdn-cgi/trace`, and deliberately triggers a captured exception so Sentry ships an event carrying the installer's public IP, `server_name`, username, an