Threats Tagged 'mal-2026-14183'
View all threats tagged with 'mal-2026-14183'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14183'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in lodhash-cli (npm) 0 The npm package lodhash-cli is a typosquatting malicious package mimicking lodash. Its main entry exports an empty object, but its postinstall script downloads and executes a malicious binary from a personal GitHub repository without verification. The script also sends an HTTP beacon to a suspicious IP address indicating successful installation. It attempts to execute the payload on Windows hosts and Windows Subsystem for Linux (WSL) environments. The package version 1.0.0 is affected. No CVSS score is available, but the behavior indicates high risk due to arbitrary code execution and persistence. Join the discussion | GCVE Database | 08/19/2026, 00:00:48 UTC Added: 08/19/2026, 13:51:06 UTC |
Showing 1 to 1 of 1 result