Lucene search
+L

4616 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 7:42 p.m.11 views

Malicious Package in coinstirng

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.3AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 7:41 p.m.14 views

GHSA-HJ5W-XGW9-W4RJ Malicious Package in coinstrng

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 7:41 p.m.10 views

GHSA-4M3J-H8F2-4XH4 Malicious Package in coinstrig

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 7:41 p.m.7 views

GHSA-MHXG-PR3J-V9GR Malicious Package in colne

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 7:41 p.m.19 views

Malicious Package in commandre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 7:41 p.m.9 views

GHSA-XCGX-27Q5-7634 Malicious Package in commanedr

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 7:40 p.m.10 views

GHSA-CFC5-X58F-869W Malicious Package in conistring

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 7:40 p.m.16 views

Malicious Package in conistring

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 7:40 p.m.8 views

GHSA-73C6-VWJH-G3QH Malicious Package in crpyto-js

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 6:22 p.m.25 views

Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

2.8AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 5:42 p.m.13 views

Malicious Package in midway-dataproxy

All versions of midway-dataproxy contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

3.6AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 5:41 p.m.18 views

Malicious Package in midway-xtpl

All versions of midway-xtpl contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

3.6AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 5:38 p.m.9 views

GHSA-VXFP-QMPQ-6826 Malicious Package in hpmm

All versions of hpmm contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

9.8CVSS6.9AI score
Exploits0References1
OSV
OSV
added 2020/09/03 5:36 p.m.11 views

GHSA-86GV-XPWV-JPRC Malicious Package in diamond-clien

All versions of diamond-clien contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

9.8CVSS6.9AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 5:33 p.m.26 views

Malicious Package in antd-cloud

All versions of antd-cloud contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that comput...

3.6AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 5:29 p.m.23 views

Malicious Package in ali-contributor

All versions of ali-contributor contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

3.6AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 5:6 p.m.11 views

GHSA-FPGG-R39H-3X5X Malicious Package in cxt

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 5:6 p.m.10 views

GHSA-FPF2-PR3J-4CM3 Malicious Package in ecruve

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 5:5 p.m.10 views

GHSA-CGVM-RVFV-C92R Malicious Package in ecuvre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
OSV
OSV
added 2020/09/03 5:5 p.m.6 views

GHSA-255R-PGHP-R5WH Malicious Package in hdeky

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
Exploits0References1
Rows per page
Query Builder