Skip to content
OpenAdvisories

Package · npm

ali-contributors

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-8m5v-f2wp-wqr9

    Malicious Package in ali-contributors

    All versions of `ali-contributors` contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. ## Recommendation Any computer that has this package installed or running should be considered fully compro…

    ali-contributors npm