0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
type-unique
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting type-unique, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-10512 | Unknown | Malicious code in type-unique (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (b576b19c56055dbc3638b361d0071c669108b9a6f8756828cadee4214d57bb13) type-unique@3.1.3 presents itself as the pino logger (matching README, keywords, and package shape) but on require() its index.js spawns a detached `node lib/caller.js` child process. That child fetches JSON from https://jsonhosting.com/api/json/3ea04c38/raw, extracts a `cookie` field, and executes its content via `new Function.constructor('require', s)(require)`, giving remote content full Node.js capabilities including the bound `require` |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (b576b19c56055dbc3638b361d0071c669108b9a6f8756828cadee4214d57bb13) type-unique@3.1.3 presents itself as the pino logger (matching README, keywords, and package shape) but on require() its index.js spawns a detached `node lib/caller.js` child process. That child fetches JSON from https://jsonhosting.com/api/json/3ea04c38/raw, extracts a `cookie` field, and executes its content via `new Function.constructor('require', s)(require)`, giving remote content full Node.js capabilities including the bound `require`