0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
superlib_ex3
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting superlib_ex3, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-19149 | Unknown | Malicious code in superlib_ex3 (npm)Malicious package. `superlib_ex3` is a multi-stage loader: on install it fetches and executes a second-stage payload from the attacker-controlled host `x.exxcube.fr` (the install hook was observed in dynamic detonation retrieving `https://x.exxcube.fr/postInstall`). No legitimate functionality; all published versions are malicious. Full indicators at the reference below. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (bd1ec5b1f032d6879c69671f7c67499798ca134a341c87d69d310e2a36c6603b) superlib_ex3 advertises itself as a trivial hello-world library expos |
| OSV (opens in a new tab) |
Malicious package. `superlib_ex3` is a multi-stage loader: on install it fetches and executes a second-stage payload from the attacker-controlled host `x.exxcube.fr` (the install hook was observed in dynamic detonation retrieving `https://x.exxcube.fr/postInstall`). No legitimate functionality; all published versions are malicious. Full indicators at the reference below. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (bd1ec5b1f032d6879c69671f7c67499798ca134a341c87d69d310e2a36c6603b) superlib_ex3 advertises itself as a trivial hello-world library expos