Lucene search
+L

6 matches found

osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-14310 Malicious code in alico (npm)

The package alico was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in alico (npm)

The package alico was found to contain malicious code...

7AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2020/09/03 5:31 p.m.•20 views

Malicious Package in alico

All versions of alico contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

3.4AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/03 5:31 p.m.•19 views

GHSA-JFX5-7MR2-G8HG Malicious Package in alico

All versions of alico contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

9.8CVSS6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•2 views

PT-2020-21373

Name of the Vulnerable Software and Affected Versions alico versions affected versions not specified Description The issue concerns malicious code within the software that uploads system information to a remote server, downloads a file, and executes it. Any computer with this package installed or...

9.8CVSS5.9AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/07/12 10:05 p.m.•21 views

Malicious Package

Overview All versions of alico contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder