CWE-509 · Supply Chain and Malicious Code
Replicating Malicious Code (Virus or Worm)
1CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
1 CVEs with CWE-509 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-16127The module pandora-doomsday infects other modules. It's since been unpublished from the registry.HackerOne · pandora-doomsday node module · 2018-06-07 | – | 1.4% | 2018-06-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.