105 matches found
Kangaroo
Kangaroo 一款可绕过运行 2.7 或更低版本的 telnet 服务器身份验证的漏洞利用工具。 又名 cve-2026-32746 如何防范此攻击 禁用 Telnet：如果不需要，请立即停止并关闭服务器和网络设备上的 telnetd 守护进程。封锁端口 23：使用防火墙或网络规则阻止所有对 TCP 端口 23 的外部访问，使互联网上的用户无法访问该服务。更新软件：查看系统供应商或 GNU Inetutils 的更新，以获取包含该漏洞修复的 2.7 以上版本。改用 SSH：用安全外壳（Secure Shell，ssh）替代 Telnet，它对连接进行加密，并且对远程管理来说安全得多。...
Malicious Package
Overview arrogant-yellow-kangaroo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in mechanical-blue-kangaroo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d56a9e900821935bb57bfa50c0ca6713116a50b73584cff9cafa57da40036ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117429
Malicious code in dutch-fuchsia-kangaroo npm...
EUVD-2025-117234
Malicious code in mechanical-blue-kangaroo npm...
EUVD-2025-93596
Malicious code in zonalkangarooz3n npm...
MAL-2025-122070 Malicious code in nice_kangaroo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc1e60b9edf57e322a320e5b703808998ead15f99ff2ad89f817fd8fd98e875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-88358
Malicious code in torykangarooz3n npm...
EUVD-2025-88702
Malicious code in southernkangarooz3n npm...
EUVD-2025-90051
Malicious code in mixedkangarooz3n npm...
EUVD-2025-74218
Malicious code in southernkangarooolive-91 npm...
EUVD-2025-75243
Malicious code in warmkangaroo-appteadev npm...
EUVD-2025-76386
Malicious code in lonelykangaroo-notthedevs npm...
Malicious code in naughty_kangaroo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38cf7e0645f33c9ddf249b52faa9a03475800fc96a40695a2bd39e6b67b4e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77770
Malicious code in amazingkangarooz3n npm...
EUVD-2025-78742
Malicious code in naughtykangarooz3n npm...
EUVD-2025-81496
Malicious code in intimatekangaroo0xrequest npm...
EUVD-2025-80971
Malicious code in pastkangaroo0xrequest npm...