← Back

Lodahs

lodahs

Vendor: Lodahs Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Lodahs Project
1Lodahs
Jun 17, 2026
Dec 12, 2019
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.