0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
lekzo_dev-amprem
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting lekzo_dev-amprem, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17813 | Unknown | Malicious code in @lekzo_dev/amprem (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ec2a03e817ffe43fd777ac600302898da7b30ad7653e1c57bea618e9801dba3b) Package presents itself as an 'Alight Motion Premium Activator' and exposes an API that POSTs caller-supplied email addresses and 'magic link' authentication URLs to the hardcoded endpoint https://charge-omissions-bits-prerequisite.trycloudflare.com/api/verify. Magic-link URLs are single-use login credentials; forwarding them to a third-party ephemeral trycloudflare.com tunnel gives the operator of that tunnel the ability to consume the lin |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ec2a03e817ffe43fd777ac600302898da7b30ad7653e1c57bea618e9801dba3b) Package presents itself as an 'Alight Motion Premium Activator' and exposes an API that POSTs caller-supplied email addresses and 'magic link' authentication URLs to the hardcoded endpoint https://charge-omissions-bits-prerequisite.trycloudflare.com/api/verify. Magic-link URLs are single-use login credentials; forwarding them to a third-party ephemeral trycloudflare.com tunnel gives the operator of that tunnel the ability to consume the lin