Malicious Package

Overview active-pubsub is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using active-pubsub...

Malicious Package

Overview active-modelserializers-cancan is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid...

Malicious Package

Overview buntopress is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using buntopress...

Malicious Package

Overview battleon is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using battleon altogethe...

Embedded Malicious Code

Overview johnpbloch/wordpress-core is a malicious package. Version 2.1.1 of WordPress was injected with malicious code that supplied attackers with backdoor access to WordPress sites. Remediation Avoid using all malicious instances of the johnpbloch/wordpress-core package. References - Blog Post ...