0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
riskunifiedgatewayserv
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting riskunifiedgatewayserv, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-11102 | Unknown | Malicious code in riskunifiedgatewayserv (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0d96d72f82bb3dfb9c04ca9b519f859677fd07d6396699d9273ef5ef14547d2b) Package installs a preinstall hook that runs index.js on npm install. The script collects the installer's hostname, platform, architecture, home directory, and configured DNS servers via os.hostname(), os.platform(), os.arch(), os.homedir(), and dns.getServers(), then POSTs the collected data to a hardcoded Burp Collaborator subdomain lh68zt2urttjod19rzsz0dssxj3brff4.oastify.com at path /hit. Execution is automatic on default npm install; t |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (0d96d72f82bb3dfb9c04ca9b519f859677fd07d6396699d9273ef5ef14547d2b) Package installs a preinstall hook that runs index.js on npm install. The script collects the installer's hostname, platform, architecture, home directory, and configured DNS servers via os.hostname(), os.platform(), os.arch(), os.homedir(), and dns.getServers(), then POSTs the collected data to a hardcoded Burp Collaborator subdomain lh68zt2urttjod19rzsz0dssxj3brff4.oastify.com at path /hit. Execution is automatic on default npm install; t