Skip to content
OpenAdvisories

Package · npm

ali-contributor

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-h3m2-h22h-695r

    Malicious Package in ali-contributor

    All versions of `ali-contributor` contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. ## Recommendation Any computer that has this package installed or running should be considered fully comprom…

    ali-contributor npm