Threats Tagged 'mal-2026-14179'
View all threats tagged with 'mal-2026-14179'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14179'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in loadashjs (npm) 0 The loadashjs package on npm is a typosquatting malicious package impersonating lodash. It exports an empty object but runs a postinstall script that sends system platform data to a hardcoded IP and downloads a malicious Windows executable from an unrelated GitHub account. The executable is saved to the temp directory and launched hidden. On WSL or virtualized Linux hosts, additional obfuscated scripts invoke the same payload via a Windows bridge. This package version 1.0.0 contains no legitimate lodash functionality and is designed to deliver and execute malware. Join the discussion | GCVE Database | 08/18/2026, 23:57:13 UTC Added: 08/19/2026, 13:51:06 UTC |
Showing 1 to 1 of 1 result