Lucene search
+L

328 matches found

Github Security Blog
Github Security Blog
added 2018/08/29 11:40 p.m.25 views

nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:40 p.m.12 views

GHSA-XH56-3F5W-9H25 nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:38 p.m.20 views

nodecaffe is malware

The nodecaffe package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:38 p.m.29 views

GHSA-2WPQ-VVW6-67WR nodecaffe is malware

The nodecaffe package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References2
OSV
OSV
added 2018/08/29 11:36 p.m.31 views

GHSA-WQH4-27CC-J8F2 nodeffmpeg is malware

The nodeffmpeg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:19 p.m.22 views

Hijacked Environment Variables in proxy.js

The proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS5AI score0.01123EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/08/29 11:16 p.m.34 views

http-proxy.js is malware

The http-proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:16 p.m.64 views

GHSA-4G54-95XV-F353 http-proxy.js is malware

The http-proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
OSV
OSV
added 2018/08/06 8:5 p.m.15 views

GHSA-M6WH-M8M8-6XX5 cofeescript is malware

The cofeescript package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofeescript installed in your...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/23 9:0 p.m.27 views

node-sqlite is malware

The node-sqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/07/23 8:54 p.m.26 views

jquery.js is malware

The jquery.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.3AI score0.01123EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/23 8:54 p.m.25 views

GHSA-JP27-CWP2-5QQR jquery.js is malware

The jquery.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/23 8:50 p.m.18 views

sqlite.js is malware

The sqlite.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.3AI score0.01123EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/23 8:50 p.m.28 views

GHSA-6F34-PQ9F-36VF sqlite.js is malware

The sqlite.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/23 8:50 p.m.25 views

nodesqlite is malware

The nodesqlite package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/23 8:50 p.m.26 views

GHSA-V73M-FJXV-W4RH fabric-js is malware

The fabric-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2018/07/23 8:50 p.m.25 views

node-fabric is malware

The node-fabric package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2018/07/23 8:50 p.m.36 views

GHSA-GFV4-2VHM-486M node-fabric is malware

The node-fabric package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
OSV
OSV
added 2018/07/23 8:50 p.m.16 views

GHSA-22J5-38QV-PXX7 sqliter is malware

The sqliter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern...

7.5CVSS7.6AI score0.01286EPSS
SaveExploits0References3
OSV
OSV
added 2018/07/23 8:49 p.m.35 views

GHSA-8QP3-PVWC-2G4P nodefabric is malware

The nodefabric package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
SaveExploits0References3
Rows per page
Query Builder