0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
spotify-url-resolvers
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting spotify-url-resolvers, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-14538 | Unknown | Malicious code in spotify-url-resolvers (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea) Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd() (the installer's project directory) into a ZIP and uploads it as a Telegram document via `bot.telegram.sendDocument` to a hardcoded bot token and chat_id defined in src/config.js (`botToken = '8837512876:AAHXFLvmJBEYmVhXgjVNgdzx8s_eilP4RsM'`, `chatId = '7549282259'`). The archive-exclusion list drops n |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (7318f0d70d44a05847fe3363f59c4e1465df1ecab43fc87757c324397e2b1cea) Package is published under the name 'spotify-url-resolvers' but its index.js starts a backup loop at module load that archives process.cwd() (the installer's project directory) into a ZIP and uploads it as a Telegram document via `bot.telegram.sendDocument` to a hardcoded bot token and chat_id defined in src/config.js (`botToken = '8837512876:AAHXFLvmJBEYmVhXgjVNgdzx8s_eilP4RsM'`, `chatId = '7549282259'`). The archive-exclusion list drops n