Lucene search
+L

4616 matches found

Github Security Blog
Github Security Blog
added 2020/09/02 9:41 p.m.29 views

Malicious Package in require-ports

Version 10.4.0 of require-ports contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a...

3.9AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/01 6:56 p.m.44 views

GHSA-428F-MH7W-6W2X pandora-doomsday is malware

The pandora-doomsday package is a malicious package that adds itself to the package.json of other packages discovered on the victim host and attempts to publish the package. It has been removed from the npm registry. Recommendation Any computer that has this package installed or running should be...

9.8CVSS9.6AI score0.01455EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2020/09/01 6:56 p.m.31 views

pandora-doomsday is malware

The pandora-doomsday package is a malicious package that adds itself to the package.json of other packages discovered on the victim host and attempts to publish the package. It has been removed from the npm registry. Recommendation Any computer that has this package installed or running should be...

10CVSS9.1AI score0.01455EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/12/16 7:29 p.m.15 views

GHSA-HM6Q-R2JC-CPQH lodahs is malware

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

8.8CVSS8.8AI score0.01257EPSS
Exploits0References3
Node.js
Node.js
added 2019/11/27 10:15 p.m.16 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:15 p.m.17 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.23 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.21 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.14 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.22 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.18 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.17 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.12 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.15 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.18 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.20 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.21 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.15 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.5AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.15 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Node.js
Node.js
added 2019/11/27 10:14 p.m.12 views

Malicious 󠅮󠅰󠅭Package

Overview All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0Affected Software1
Rows per page
Query Builder