Threats Tagged 'mal-2026-14310'
View all threats tagged with 'mal-2026-14310'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-14310'
Click on any threat for detailed analysis and mitigation recommendations
Malicious code in bunnyhijack-test-0x00 (npm) 0 The npm package bunnyhijack-test-0x00 (versions 1.0.0 and 1.0.1) contains malicious code that hijacks the node command during npm lifecycle scripts by placing a shim executable in node_modules/.bin. This hijack allows arbitrary code execution under the installer's user account during package installation. The current payload is benign, demonstrating the hijack by creating a marker file and printing a message, but the mechanism could be used to run any malicious code. Installing or running this package compromises the affected system, and all secrets and keys on that system should be rotated immediately from a different machine. Join the discussion | GCVE Database | 08/19/2026, 15:20:03 UTC Added: 08/20/2026, 14:08:54 UTC |
Showing 1 to 1 of 1 result