Threats Tagged 'mal-2026-10508'
View all threats tagged with 'mal-2026-10508'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-10508'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in nodemon-elint (npm) 0 The nodemon-elint package version 3.1.13 is a malicious npm package that impersonates the legitimate nodemon package by copying its metadata and name style. It declares a runtime dependency on an undocumented and unused package, type-elint, which is attacker-controlled and executes code during installation or runtime. This dependency-chain drop technique allows malicious code to run on the installer's machine without visible payloads in the wrapper package itself. The package also incorrectly lists chai, a test library, as a production dependency, indicating anomalous behavior inconsistent with the original nodemon package. Join the discussion | GCVE Database | 07/13/2026, 22:11:54 UTC Added: 07/14/2026, 09:21:18 UTC |
Showing 1 to 1 of 1 result