0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
mx3dxhgic8xhd6
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting mx3dxhgic8xhd6, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17936 | Unknown | Malicious code in mx3dxhgic8xhd6 (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6c4fbf379ad5f6f1c43cb74ef7fbc66e56fe9b0c0edeaffd1f51bb9e5558c2bb) Package mx3dxhgic8xhd6@1.0.1 is published under a random-looking short name with only two files, one of which is an index.html containing a large obfuscator.io-style JavaScript payload. The script uses hex-named identifiers (_0x...), a ~500-entry shuffled string array returned by a decoder function, a rotating-array decoder loop, and runtime atob / String.fromCharCode calls, so no destination URLs, API endpoints, or data sinks are visible a |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6c4fbf379ad5f6f1c43cb74ef7fbc66e56fe9b0c0edeaffd1f51bb9e5558c2bb) Package mx3dxhgic8xhd6@1.0.1 is published under a random-looking short name with only two files, one of which is an index.html containing a large obfuscator.io-style JavaScript payload. The script uses hex-named identifiers (_0x...), a ~500-entry shuffled string array returned by a decoder function, a rotating-array decoder loop, and runtime atob / String.fromCharCode calls, so no destination URLs, API endpoints, or data sinks are visible a