Lucene search
K

7807 matches found

Github Security Blog
Github Security Blog
added 2018/08/29 11:50 p.m.23 views

node-opencv is malware

The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:47 p.m.10 views

GHSA-5HXW-R847-QFWP opencv.js is malware

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS5.8AI score0.01123EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2018/08/29 11:45 p.m.25 views

openssl.js is malware

The openssl.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:45 p.m.11 views

GHSA-22GQ-X6PG-752J openssl.js is malware

The openssl.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:43 p.m.45 views

nodemailer.js is malware

The nodemailer.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:43 p.m.15 views

GHSA-J866-8VXX-27HX nodemailer.js is malware

The nodemailer.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:40 p.m.21 views

nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:40 p.m.12 views

GHSA-XH56-3F5W-9H25 nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:38 p.m.17 views

nodecaffe is malware

The nodecaffe package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:38 p.m.16 views

GHSA-2WPQ-VVW6-67WR nodecaffe is malware

The nodecaffe package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2018/08/29 11:36 p.m.19 views

nodeffmpeg is malware

The nodeffmpeg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:36 p.m.16 views

GHSA-WQH4-27CC-J8F2 nodeffmpeg is malware

The nodeffmpeg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
OSV
OSV
added 2018/08/29 11:20 p.m.20 views

GHSA-VV6Q-9CFW-4C83 smb is malware

The smb package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern is...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:20 p.m.67 views

smb is malware

The smb package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern is...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2018/08/29 11:19 p.m.19 views

Hijacked Environment Variables in proxy.js

The proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS5AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:19 p.m.19 views

GHSA-QJ73-V688-WQXF Hijacked Environment Variables in proxy.js

The proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:16 p.m.30 views

http-proxy.js is malware

The http-proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:16 p.m.15 views

GHSA-4G54-95XV-F353 http-proxy.js is malware

The http-proxy.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
OSV
OSV
added 2018/08/29 11:5 p.m.16 views

GHSA-C2M4-W5HM-VQJW crossenv is malware

The crossenv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:5 p.m.18 views

crossenv is malware

The crossenv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder