VDB
MAL-2026-17865
MAL-2026-17865
PUBLISHED
Malicious code in passwordcrackv2 (npm)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | passwordcrackv2 | 0 |
Timeline
- Oct 9, 2026 CVE Published
- Oct 12, 2026 CVE Updated
References
- https://www.npmjs.com/package/passwordcrackv2 package
- https://web.archive.org/web/20261012050111/https://github.com/lunexindonesia/node-net-pool/blob/main/index.js evidence
- https://web.archive.org/web/20261012050120/https://github.com/lunexindonesia/node-net-pool evidence
- https://osv.dev/vulnerability/MAL-2026-16100 url
- https://osv.dev/vulnerability/MAL-2026-15570 url