0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
utility-kit-ts
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting utility-kit-ts, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-12493 | Unknown | Malicious code in utility-kit-ts (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (11d4f4654f1acbc26d30e2ea0cae4816bf6e3a847dce2456134d050a38a8a575) The package's default export getPlugin issues a fetch to the hardcoded bare-IP URL https://31.97.137.157:45000/icons/109 and passes the returned data.credits field to the Function constructor, then invokes the compiled function with require, module, process, Buffer and other Node primitives bound in. Any code the remote host returns executes in the caller's Node.js process with full library privileges. A separate function setDefaultModule c |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (11d4f4654f1acbc26d30e2ea0cae4816bf6e3a847dce2456134d050a38a8a575) The package's default export getPlugin issues a fetch to the hardcoded bare-IP URL https://31.97.137.157:45000/icons/109 and passes the returned data.credits field to the Function constructor, then invokes the compiled function with require, module, process, Buffer and other Node primitives bound in. Any code the remote host returns executes in the caller's Node.js process with full library privileges. A separate function setDefaultModule c