Lucene search
+L

3329 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/05/16 7:13 a.m.•12 views

Malicious code in @epc-infra/dynamo-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d45f7863b32e8818b117c91b3f213e270acfa8104a223f2ad0ede0cfadf83e53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/16 6:46 a.m.•14 views

MAL-2022-6524 Malicious code in testingx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/16 6:46 a.m.•17 views

MAL-2022-869 Malicious code in adroit-f0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d340a87917821f16332cc13efdd1a133abf2f230303f4245672e1e6307a146d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/16 6:46 a.m.•14 views

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/16 6:45 a.m.•13 views

MAL-2022-2101 Malicious code in com.unity.render-pipelines.high-definition-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67f837ca8ea83c83003168af81c90f02e07a73994e832484930baf383acb5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
nodejs
nodejs
•added 2020/11/30 6:22 p.m.•60 views

Malicious Package

Overview The package db-json.js contained malicious code. The package had jdb.js as a dependency and would execute the same malware as described in https://www.npmjs.com/advisories/1584. Recommendation Any computer that has this package installed or running should be considered fully compromised...

7AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2020/11/13 9:33 p.m.•66 views

Malicious Package

Overview The package xpc.js contained malicious code. The package ran a postinstall script that executes two.exe files containing Trojan malware. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2020/09/04 4:50 p.m.•17 views

GHSA-97MP-9G5C-6C93 Malicious Package in bs58chcek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/04 4:47 p.m.•29 views

Malicious Package in bpi39

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/04 4:45 p.m.•14 views

GHSA-4M3P-X2HP-2PGX Malicious Package in bitcroe-lib

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/04 4:42 p.m.•27 views

Malicious Package in bitconid-rpc

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/04 4:37 p.m.•16 views

GHSA-RV6Q-P3X7-43FX Malicious Package in bitcoimjs-lib

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/04 4:36 p.m.•28 views

Malicious Package in bitcoimd-rpc

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/04 3:35 p.m.•18 views

GHSA-JQVV-R4W3-8F7W Malicious Package in bictoind-rpc

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/04 3:28 p.m.•29 views

Malicious Package in babel-loadre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/03 9:08 p.m.•17 views

GHSA-VM7J-4RJ6-MW2P Malicious Package in ember_cli_babe

Version 6.16.0 of emberclibabe contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a...

9.8CVSS7.3AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/03 7:43 p.m.•23 views

Malicious Package in bs85

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/03 7:42 p.m.•19 views

Malicious Package in bsae-x

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/03 7:42 p.m.•19 views

GHSA-MGFF-XPG3-3GWC Malicious Package in bsae-x

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
OSV
OSV
•added 2020/09/03 7:41 p.m.•21 views

GHSA-R8HX-3QX6-HXQ9 Malicious Package in commandre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Rows per page
Query Builder