0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
sqlite-group-sql-creator
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting sqlite-group-sql-creator, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10578 | Unknown | Malicious code in @sqlite-group/sql-creator (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4d3bd76c01604d26251c1650c71f8a99ad32c5389c4e42795477ae660be33a2a) The package is published under a scope that impersonates SQLite (`@sqlite-group`) and declares itself as "cloud definitions for node", but the shipped `index.js` is a near-verbatim copy of the feross/buffer library with a single injected top-level statement: `var ins = import('@sqlite-group/schema-generator');`. This dynamic import fires on any `require`/`import` of the package, handing control to whatever top-level module code the sibling |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (4d3bd76c01604d26251c1650c71f8a99ad32c5389c4e42795477ae660be33a2a) The package is published under a scope that impersonates SQLite (`@sqlite-group`) and declares itself as "cloud definitions for node", but the shipped `index.js` is a near-verbatim copy of the feross/buffer library with a single injected top-level statement: `var ins = import('@sqlite-group/schema-generator');`. This dynamic import fires on any `require`/`import` of the package, handing control to whatever top-level module code the sibling