0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
kit-vim-map
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting kit-vim-map, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-13740 | Unknown | Malicious code in kit-vim-map (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916) The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x86_64 ELF at dist/internal/calc-math.dat. The main entry's top-level IIFE chmods 0755 and spawns this binary detached on any require()/import, under cover text 'Native accelerator loaded'. The ELF is a remote-controlled shell beaconing to hardcoded C2 217.60.77.63: it accepts remote commands and pipes them to /bin/sh and /bin/bash (arbitrary R |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (dc1b76be1956e2772f73d7712934ee4a296d4407df590f6ca4225db7310de916) The package advertises itself as a dependency-free calendar/streak math library but ships a Linux x86_64 ELF at dist/internal/calc-math.dat. The main entry's top-level IIFE chmods 0755 and spawns this binary detached on any require()/import, under cover text 'Native accelerator loaded'. The ELF is a remote-controlled shell beaconing to hardcoded C2 217.60.77.63: it accepts remote commands and pipes them to /bin/sh and /bin/bash (arbitrary R