Threats Tagged 'mal-2026-13485'
View all threats tagged with 'mal-2026-13485'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-13485'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in weight2loss (npm) 0 The npm package 'weight2loss' version 1.0.5 contains malicious code in a setup.js file referenced by a postinstall hook. This code, if executed, steals sensitive credentials from the installer environment, exfiltrates them to an attacker-controlled server and email, downloads and executes additional malicious scripts, establishes persistent remote access via a cron job, and deletes itself to evade detection. The postinstall hook is misconfigured and does not auto-run on install in this exact version, but the malicious payload is fully functional if manually invoked or if the manifest is corrected. The package's stated purpose does not align with its malicious behavior. Join the discussion | GCVE Database | 08/06/2026, 23:54:44 UTC Added: 08/07/2026, 05:57:09 UTC |
Showing 1 to 1 of 1 result