51 matches found
MAL-2026-15896 Malicious code in easypanel-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1675d70b09ce1f826b69fbfcee3cf56a81c49c37fa4fb4bdafd4f72b736880f8 The package's npm preinstall hook collects the installer's hostname, OS username, current working directory, and CI-related environment variable name...
Malicious code in easypanel-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...
MAL-2026-15895 Malicious code in easypanel-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2744a6f0dfde1930ab560731e54cb8a1e1c8dc61a2072705498ddcaa6dd1a592 The package's preinstall lifecycle script runs automatically on npm install and collects installer identity os.hostname, os.userInfo.username,...
MAL-2026-15899 Malicious code in easypanel-docker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...
Malicious code in easypanel-docker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43ed7789fb269c2613ce7b2442fdceab1b5e8b5360048d7bda2a63f0e9fac63 The preinstall lifecycle script collects host fingerprint data os.hostname, os.userInfo.username, process.cwd, and CI-related environment variable...
Malicious code in easypanel-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...
EUVD-2025-199164
Malicious code in easypanel-sdk npm...
MAL-2025-191085 Malicious code in easypanel-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac9db35167e3722d383a2c76a094d96d19c1097508758bccde5c8a5445550bd The package easypanel-sdk was found to contain malicious code. Source: ghsa-malware fdce617dc7f1837495fa0e90e3ac7d214b335c36893c9f97d749e28949d361d3...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Kangle虚拟主机本地文件包含漏洞
测试环境：kangle-3.3.9.msi，ep-2.6.4.exe（官方4-18日更新），windows XP 首先安装kangle server，然后安装easypanel，安装成功后访问http://127.0.0.1:3312/，会自动跳转到http://127.0.0.1:3312/vhost/?c=session&a=loginForm。 然后随便输入用户名密码登陆，如图发送的请求： 然后修改请求url中的参数c的值，将session改为： C=../../../../../../../../../../../windows/system.ini%00...