0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
native-runner
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting native-runner, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-17218 | Unknown | Malicious code in native-runner (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c057973da17ec629b4cd8c10a2b74108761f4a9ad4a1a31b280031da1f7139ca) On `require('native-runner')`, a top-level IIFE in index.js polls for up to two minutes for a file at %APPDATA%\Microsoft\Windows\node_runtime_helper.exe and, once present, spawns it via child_process.spawn with {detached:true, windowsHide:true, stdio:'ignore'} and unref's the child, so the process outlives the importing Node process with no visible window and no captured output. This launcher is not part of the package's advertised API (RE |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c057973da17ec629b4cd8c10a2b74108761f4a9ad4a1a31b280031da1f7139ca) On `require('native-runner')`, a top-level IIFE in index.js polls for up to two minutes for a file at %APPDATA%\Microsoft\Windows\node_runtime_helper.exe and, once present, spawns it via child_process.spawn with {detached:true, windowsHide:true, stdio:'ignore'} and unref's the child, so the process outlives the importing Node process with no visible window and no captured output. This launcher is not part of the package's advertised API (RE