7 matches found
Malicious Package
Overview @aerodrome-finance/contracts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in @aerodrome-finance/contracts (npm)
@aerodrome-finance/contracts is a malicious npm package that impersonates Aerodrome Finance. It carries no legitimate functionality; the published tarball contains only a package.json and an install-time payload index.js. Both preinstall and postinstall run node index.js || true, so the code...
MAL-2026-13734 Malicious code in @aerodrome-finance/contracts (npm)
@aerodrome-finance/contracts is a malicious npm package that impersonates Aerodrome Finance. It carries no legitimate functionality; the published tarball contains only a package.json and an install-time payload index.js. Both preinstall and postinstall run node index.js || true, so the code...
CVE-2026-34300
Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft component: Contracts. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Contracts...
EUVD-2026-24389
Vulnerability in the PeopleSoft Enterprise FIN Contracts product of Oracle PeopleSoft component: Contracts. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Contracts...
Malicious code in union-finance-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f2a7a59e93388fda46cda69a405d50e420ee9a3e50c40af312175b6a08850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6782 Malicious code in union-finance-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 864f2a7a59e93388fda46cda69a405d50e420ee9a3e50c40af312175b6a08850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...