0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
qbo-ui-services
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting qbo-ui-services, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-15519 | Unknown | Malicious code in qbo-ui-services (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7) package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services": "https://repo.securityctrl.com/qbo-ui-services". On npm install, npm fetches whatever tarball that URL returns and installs it, executing any lifecycle scripts contained inside, with no version pin and no integrity hash. The shipped index.js is an inert stub, so the manifest line is the entire |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7391c0f366c6339b3c6c75a1e891d1123cc4483ba3c01eedc20ebbbe3dfc48a7) package.json line 11 declares a self-referential dependency whose source is a bare HTTP URL rather than a registry version range: "qbo-ui-services": "https://repo.securityctrl.com/qbo-ui-services". On npm install, npm fetches whatever tarball that URL returns and installs it, executing any lifecycle scripts contained inside, with no version pin and no integrity hash. The shipped index.js is an inert stub, so the manifest line is the entire