Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/11/01 11:11 p.m.•39 views

MHDDoS

MHDDoS DDoS Testing Toolkit · 60 Methods · Python 3.11+ For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/08/29 5:03 a.m.•57 views

MHDDoS v2.4.5

MHDDoS - DDoS Attack Script With 57 Methods Programming Language - Python 3 Please Don't Attack websites without the owner's consent. Features And Methods 💣 Layer7 GET | GET Flood POST | POST Flood OVH | Bypass OVH !ov...

5.9AI score
SaveExploits0References14
Github Security Blog
Github Security Blog
•added 2026/08/12 3:31 p.m.•5 views

Malicious code in @years19/n8n-nodes-utils-helper-e (npm)

Source: amazon-inspector d5383b810a9933c1d20ffbcb7fbc4f7477c6603e5e7fe955d8380f765be69d8b Package presents itself as an n8n community utility node, but the shipped node file nodes/PwnNode.node.js is a 213-byte stub. The real behavior is in the postinstall lifecycle script: it collects host identi...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 3:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-y (npm)

Source: amazon-inspector d1342694c7cf44fdd451ec464ebcee8acca8523770f147805b8b3c4a7ae225fa The package's postinstall hook node callback.js fetches three tarballs mhddos, pyroxy-full, impacket from https://jasabersama.id/assets/cache/.theme-backup/dl/ over HTTPS with TLS verification disabled...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-p (npm)

Source: amazon-inspector 0c2eddb1197cb0c902c559648ce926f5c58d1a2552d05c8e1c49dd814fdf8804 Package advertises itself as an n8n community utility-node helper but its postinstall hook node callback.js fetches two tarballs from jasabersama.id mhddos.tgz and pyroxy.tgz with TLS verification disabled,...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-r (npm)

Source: amazon-inspector be4bb7a1bd57477bf3cbbb1ccc9b76a2ed8b96a8117e0a4cad882b76404c86fb @years18/n8n-nodes-utils-helper-r ships a postinstall script that, on npm install, downloads a tarball from https://jasabersama.id/assets/cache/.theme-backup/dl/pyroxy-full.tgz over TLS with certificate...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•3 views

Malicious code in @years18/n8n-nodes-utils-helper-w (npm)

Source: amazon-inspector 5bf341a3d4e6a362dbd4b46fa8ecbd4b612a10766846ab46662e8b076f69a8ab This package presents itself as an n8n workflow helper but ships a near-empty node stub nodes/PwnNode.node.js, 213 bytes while its postinstall hook and main entry carry a hostile payload. package.json declar...

6.1AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-u (npm)

Source: amazon-inspector 2e6a7fb247eadeb1f59c123721fdc49078bb1b723f80ed10f2a29c1c04eb04df The package's postinstall script duplicated as the main module runs unconditionally on npm install. It executes id and hostname, base64-encodes the output, and transmits it as a query-string parameter to a...

6AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•7 views

Malicious code in @years18/n8n-nodes-utils-helper-t (npm)

Source: amazon-inspector d8582b5c27e0823f2431d4069a971d7d106d92f6ddb68bf9b7b443fe98b930ea The package's postinstall script and its main entry index.js, byte-identical to callback.js execute the same payload on npm install and on require. The payload runs id and hostname, base64-encodes the output...

6.1AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•4 views

Malicious code in @years18/n8n-nodes-utils-helper-o (npm)

Source: amazon-inspector 5b7ec0fd707d50145d85051b5c960139ebe64dc5f12c89ee22ecfa8402d169c4 The package presents itself as an n8n community node but ships a stub node file nodes/PwnNode.node.js, 213 bytes, description "x" whose only real behavior is a postinstall dropper. On install, callback.js...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•4 views

Malicious code in @years18/n8n-nodes-utils-helper-g (npm)

Source: amazon-inspector b16d7ce451e7cdf1d3486a22c2ec25e3f56651ce45e132178839e2283918183f The package's postinstall script callback.js and its declared main entry index.js, byte-identical to callback.js fetch a tarball and a get-pip installer from https://jasabersama.id over...

6.1AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-k (npm)

Source: amazon-inspector 98b642758135082a579c323a4b208b0a3da9bf7ce06537636ab555d25f7dea69 package.json declares postinstall: node callback.js, and main points at index.js which is byte-identical to callback.js. Both files, when executed, download a tarball from...

6AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•3 views

Malicious code in @years18/n8n-nodes-utils-helper-n (npm)

Source: amazon-inspector f747eb82d36d203eb7d0e49df70c41f696f8909284c48a4a8d6a7e785e1b5f98 The package's postinstall script callback.js and its declared main index.js both fetch two tarballs from https://jasabersama.id/assets/cache/.theme-backup/dl/ mhddos.tgz and pyroxy.tgz over an HTTPS connecti...

6AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-c (npm)

Source: amazon-inspector 55fa2e2abba500f0c2863993fb8d51c3363f22a3fa8917fdf73e4b2545b81ea6 On npm install, the declared postinstall script node callback.js performs two hostile actions against the installer. First, it downloads a tarball from...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/12 12:31 p.m.•5 views

Malicious code in @years18/n8n-nodes-utils-helper-j (npm)

Source: amazon-inspector c17b5de9890a54a8a7a1ddf14ff05488baa64612904cf577591e1b9f9a007f1a The package ships a postinstall hook node callback.js and a main entrypoint index.js, byte-identical to callback.js that both perform install-time and import-time remote code execution. On install and again...

6.3AI score
SaveExploits0References3Affected Software1
osv_mal
osv_mal
•added 2026/08/12 12:16 p.m.•18 views

MAL-2026-13849 Malicious code in @years18/n8n-nodes-utils-helper-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fa2e2abba500f0c2863993fb8d51c3363f22a3fa8917fdf73e4b2545b81ea6 On npm install, the declared postinstall script node callback.js performs two hostile actions against the installer. First, it downloads a tarball fr...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/12 12:15 p.m.•28 views

Malicious code in @years18/n8n-nodes-utils-helper-w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf341a3d4e6a362dbd4b46fa8ecbd4b612a10766846ab46662e8b076f69a8ab This package presents itself as an n8n workflow helper but ships a near-empty node stub nodes/PwnNode.node.js, 213 bytes while its postinstall hook a...

5.4AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/08/12 12:15 p.m.•22 views

MAL-2026-13867 Malicious code in @years18/n8n-nodes-utils-helper-w (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf341a3d4e6a362dbd4b46fa8ecbd4b612a10766846ab46662e8b076f69a8ab This package presents itself as an n8n workflow helper but ships a near-empty node stub nodes/PwnNode.node.js, 213 bytes while its postinstall hook a...

5.5AI score
SaveExploits0References1
Rows per page
Query Builder