GHSA-RM7C-X424-G2MW Malicious Package in asyync

All versions of asyync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

GHSA-5FM9-JMV7-FCX5 Malicious Package in asynnc

All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

Malicious Package in asymc

All versions of asymc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

GHSA-X6CH-C6RV-F7WH Malicious Package in asymc

All versions of asymc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

GHSA-87QW-7V97-W34R Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

GHSA-RGGQ-F2WF-M6CP Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

Malicious Package in 4equest

All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

PT-2020-21260

Name of the Vulnerable Software and Affected Versions requets affected versions not specified Description The requets package is a typosquatted version of a popular package with a similar name. It tracks users who have installed the incorrect package and uploads information to a remote server,...

PT-2020-21460

Name of the Vulnerable Software and Affected Versions carloprojectlesang versions affected versions not specified Description The issue concerns obfuscated malware within the software that uploads Discord user tokens to a remote server. This allows attackers to make purchases on behalf of users i...

PT-2020-21442

Name of the Vulnerable Software and Affected Versions saync affected versions not specified Description The issue concerns a typosquatted package named saync that mimics a popular package of a similar name. When installed, it tracks users and uploads information to a remote server, including the...

PT-2020-21440

Name of the Vulnerable Software and Affected Versions rqeuest affected versions not specified Description The issue concerns a typosquatted package named rqeuest that tracks users who have installed it, thinking it was a similarly named popular package. This package uploads certain information to...

PT-2020-21411

Name of the Vulnerable Software and Affected Versions experss affected versions not specified Description The issue concerns a typosquatted package that tracked users who installed it by mistake, thinking it was a similarly named popular package. It uploaded various information to a remote server...

PT-2020-21301

Name of the Vulnerable Software and Affected Versions reques affected versions not specified Description The reques package is a typosquatted version of a popular package with a similar name. It tracks users who have installed the incorrect package and uploads information to a remote server,...

PT-2020-21443

Name of the Vulnerable Software and Affected Versions eact affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a remote server...

EulerOS 2.0 SP5 : openssh (EulerOS-SA-2020-1928)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious...

PT-2020-21281

Name of the Vulnerable Software and Affected Versions wepack-cli versions affected versions not specified Description The issue concerns a typosquatted package that tracked users who installed it by mistake, thinking it was a similarly named popular package. Upon installation, the package uploade...

PT-2020-20948

Name of the Vulnerable Software and Affected Versions requestt affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a remote...

PT-2020-21144

Name of the Vulnerable Software and Affected Versions commnader affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. Upon installation, the package uploads certa...