0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
authsessionbridge
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting authsessionbridge, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6657 | Unknown | Malicious code in authsessionbridge (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8c7726c32d14f31a311ae45a86c88fb5c478b8e89d9c71981b7c8ad1da946739) On require, lib/constants.js (reached transitively from the package main) issues an axios GET to a base64-obfuscated URL at jsonkeeper.com (https://www.jsonkeeper.com/b/PJNZP, with a second endpoint https://www.jsonkeeper.com/b/HY6M6 hex-decoded in the same file) and passes the response body directly to eval(). Immediately before the remote fetch the file constructs an object spreading the full process.env together with os.platform(), os.ho |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (8c7726c32d14f31a311ae45a86c88fb5c478b8e89d9c71981b7c8ad1da946739) On require, lib/constants.js (reached transitively from the package main) issues an axios GET to a base64-obfuscated URL at jsonkeeper.com (https://www.jsonkeeper.com/b/PJNZP, with a second endpoint https://www.jsonkeeper.com/b/HY6M6 hex-decoded in the same file) and passes the response body directly to eval(). Immediately before the remote fetch the file constructs an object spreading the full process.env together with os.platform(), os.ho