0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
mock-datas-lib
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting mock-datas-lib, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-18637 | Unknown | Malicious code in mock-datas-lib (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (acbce1629b1a23a1dd82a3143a008b18c8c944982c5a006e4e64d40bb283ac59) Package advertised as a mock-data generator ships an obfuscated loader in index.js and an encoded payload in database.js disguised as a product catalog. The exported getTransactions API invokes load_transaction_data, which iterates records in database.js, applies a Caesar-shift transform (keyed on the caller's count argument) to each record's base64 `mark` field, concatenates and base64-decodes the result, then passes the decoded source to |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (acbce1629b1a23a1dd82a3143a008b18c8c944982c5a006e4e64d40bb283ac59) Package advertised as a mock-data generator ships an obfuscated loader in index.js and an encoded payload in database.js disguised as a product catalog. The exported getTransactions API invokes load_transaction_data, which iterates records in database.js, applies a Caesar-shift transform (keyed on the caller's count argument) to each record's base64 `mark` field, concatenates and base64-decodes the result, then passes the decoded source to