0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
kit-map-vim
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting kit-map-vim, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13915 | Unknown | Malicious code in kit-map-vim (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc) On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check. The.dat file is a Linux x86_64 ELF RedShell remote-access implant disguised as a 'native math accelerator'. The implant beacons to hardcoded C2 host 217.60.77.63 over plain HTTP and exposes command handlers that download and execute additional ELF binaries and shellcode from http://217.60.77.63/ |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc) On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check. The.dat file is a Linux x86_64 ELF RedShell remote-access implant disguised as a 'native math accelerator'. The implant beacons to hardcoded C2 host 217.60.77.63 over plain HTTP and exposes command handlers that download and execute additional ELF binaries and shellcode from http://217.60.77.63/