compromised.live Free. No login.
Feed / MAL-2026-18522Also as JSON
ACT NOWCompromised package npm / dsh-moss-console

Malicious code in dsh-moss-console (npm)

What's happening and what to do

Malicious code was published inside this npm package, so installing it can let attackers run harmful code on the machine that installs it. npm package dsh-moss-console, version 3.3.0. Remove or downgrade dsh-moss-console 3.3.0 now, and check systems that installed it for signs of compromise.

AI summary of the sources on this page. Regenerated when a source changes.

Affected versions

EcosystemPackageAffectedSafe from
npmdsh-moss-console3.3.0 None. Remove it.

Signals over time

  1. 2026-11-03 22:10First seen here.

Source text