964 matches found
Malicious code in pubnub-moderation-tool (npm)
Source: amazon-inspector 750918c1551873c10f69bc746538652a6adf047d6c76231a40832fff30b74938 package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install. The script collects os.hostname, os.userInfo, home directory, DNS server list, package metadata, and...
ikuzo-python (>=0.1.4, <=0.1.5) potentially affected by CVE-2023-26154 via pubnub (3.9.0)
pubnub PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pubnub and may be impacted: - ikuzo-python =0.1.4, =0.1.5 Source cves: CVE-2023-26154 Source advisory: OSV:PYSEC-2026-1807...
yalexs (1.1.8) potentially affected by CVE-2023-26154 via pubnub (5.1.0)
pubnub PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pubnub and may be impacted: - yalexs 1.1.8 Source cves: CVE-2023-26154 Source advisory: OSV:PYSEC-2026-1807...
spyglass-neuro (>=0.1.0, <=0.5.5) potentially affected by CVE-2023-26154 via pubnub (6.3.3)
pubnub PYPI version 6.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pubnub and may be impacted: - spyglass-neuro =0.1.0, =0.5.5 Source cves: CVE-2023-26154 Source advisory: OSV:PYSEC-2026-1807...
pubnub Insufficient Entropy vulnerability
Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0;...
PYSEC-2026-1807 pubnub Insufficient Entropy vulnerability
Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0;...
civis (>=1.8.1, <=1.15.1), parsons (>=0.9.0, <=0.11.1) +1 more potentially affected by CVE-2023-26154 via pubnub (4.8.1)
pubnub PYPI version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pubnub and may be impacted: - civis =1.8.1, =0.9.0, =0.7.12, =0.8.5 Source cves: CVE-2023-26154 Source advisory: OSV:PYSEC-2026-1807...
vivintpy (>=2022.1.0, <=2022.6.0) potentially affected by CVE-2023-26154 via pubnub (5.5.0)
pubnub PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pubnub and may be impacted: - vivintpy =2022.1.0, =2022.6.0 Source cves: CVE-2023-26154 Source advisory: OSV:PYSEC-2026-1807...
MAL-2026-4650 Malicious code in pubnub-moderation-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750918c1551873c10f69bc746538652a6adf047d6c76231a40832fff30b74938 package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install. The script collects os.hostname,...
Malicious code in pubnub-moderation-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750918c1551873c10f69bc746538652a6adf047d6c76231a40832fff30b74938 package.json declares "preinstall": "node index.js", causing index.js to run automatically on npm install. The script collects os.hostname,...
Malicious Package
Overview pubnub-element is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in pubnub-element
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in pubnub-element (npm)
Malicious scripts exfiltrate sensitive info username, path, hostname to a remote webhook via wget in test, preinstall & preupdate. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1f86ef3c85074c2ca23cfd60296a4875f6bc610547f691543cef5f38e1788a The package...
EUVD-2017-7453
Malware in sbrugna...
EUVD-2017-7454
Malware in sbrugna...
EUVD-2017-7456
Malware in sbrugna...
EUVD-2017-7459
Malware in sbrugna...
EUVD-2017-7463
Malware in sbrugna...