WS-2019-0488

Yeoman-genrator v1.0.0 contains malicious code as a preinstall script. The package is malware designed to take advantage of user's mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

Malicious code in yeoman-33enerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46467411b04dd7b9a5c0f9063b47e48dcb506330bdcd90899e4e20e48de784e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2020-21278

Name of the Vulnerable Software and Affected Versions yeoman-generator version 3.1.1 Description The issue concerns a malicious package designed to exploit users who mistakenly install it due to a typo in the module name. Upon installation, the package downloads and executes a file from a remote...