Vulnerability MAL-2026-19149

Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 days ago
November 08, 2026 at 01:30 AM UTC
Malicious code in superlib_ex3 (npm)
*
*

Summary

Malicious code in superlib_ex3 (npm)

Details

Malicious package. superlib_ex3 is a multi-stage loader: on install it fetches and executes a second-stage payload from the attacker-controlled host x.exxcube.fr (the install hook was observed in dynamic detonation retrieving https://x.exxcube.fr/postInstall). No legitimate functionality; all published versions are malicious. Full indicators at the reference below.

Impacted packages

Timeline

Published
4 days ago
November 08, 2026 at 01:30 AM UTC
Last Modified
2 hours ago
November 12, 2026 at 05:30 AM UTC