0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
kisama-js
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting kisama-js, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15645 | Unknown | Malicious code in kisama-js (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3) kisama-js@0.4.8 ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec (POST) for shell command execution plus /api/ws/terminal backed by node-pty/bun-pty for interactive PTY control. It additionally exposes a full-filesystem REST surface (list/cat/upload/download/delete/move/cp) and cron/onetime task scheduling, giving any party who reaches the port full remote control of the i |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0179b9fe97920f04431eb6d6e94b46c6ef2889af5e55d6a0b79793097187fed3) kisama-js@0.4.8 ships an obfuscated index.js that runs an HTTP+WebSocket agent binding 0.0.0.0:8000 by default and exposing /api/exec (POST) for shell command execution plus /api/ws/terminal backed by node-pty/bun-pty for interactive PTY control. It additionally exposes a full-filesystem REST surface (list/cat/upload/download/delete/move/cp) and cron/onetime task scheduling, giving any party who reaches the port full remote control of the i