Skip to content
OpenAdvisories

Package · npm

tensorplow

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-m2fp-c79h-rr79

    Malicious Package in tensorplow

    All versions of `tensorplow` contain malicious code as a preinstall script. When installed, the package calls home to a Command and Control server to execute arbitrary commands. ## Recommendation Any computer that has this package installed or running should …

    tensorplow npm