Lucene search
+L

15 matches found

osv_mal
osv_mal
•added 2022/06/20 8:13 p.m.•18 views

MAL-2022-1657 Malicious code in botbait (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00f27c0dc2d4ad5be71cea265f3225e0eec5a36977a27f13aa5eef9a7ee3a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:13 p.m.•14 views

Malicious code in botbait (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00f27c0dc2d4ad5be71cea265f3225e0eec5a36977a27f13aa5eef9a7ee3a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/01 6:57 p.m.•64 views

Tracking Module in botbait

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked test, requir...

5.3CVSS3.1AI score0.00866EPSS
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/01 6:57 p.m.•153 views

GHSA-4R5X-QJQC-P579 Tracking Module in botbait

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked test, requir...

5.3CVSS5.1AI score0.00866EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/06/20 12:00 a.m.•12 views

botbait Information Disclosure Vulnerability

botbait is a tool used in the npm ecosystem for tracking bot and automation tool usage. An information disclosure vulnerability exists in botbait. An attacker could exploit this vulnerability to disclose information...

5.3CVSS4.9AI score0.00866EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2018/06/12 12:00 a.m.•324 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.6AI score0.03278EPSS
SaveExploits4References108
NVD
NVD
•added 2018/06/07 2:29 a.m.•33 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.2AI score0.00866EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/06/07 2:29 a.m.•20 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.8AI score0.00866EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/07 2:29 a.m.•22 views

Code injection

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5CVSS5.2AI score0.00866EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/06/07 2:00 a.m.•44 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.2AI score0.00866EPSS
SaveExploits0References1
CVE
CVE
•added 2018/06/07 2:00 a.m.•93 views

CVE-2017-16126

The CVE-2017-16126 issue concerns the npm module botbait, which tracks user information within the npm ecosystem. Affected component: the botbait module; described data collection includes Source IP, process.versions, process.platform, and how the module was invoked (test, require, pre-install). ...

5.3CVSS5.2AI score0.00866EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/07 12:00 a.m.•6 views

CVE-2017-16126: Exposure of Sensitive Information to an Unauthorized Actor

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.9AI score0.00866EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/06/07 12:00 a.m.•10 views

PT-2018-6154

Name of the Vulnerable Software and Affected Versions: botbait affected versions not specified Description: The module botbait is a tool used to track bot and automated tools usage within the npm ecosystem. It records and tracks user information, including source IP, process.versions,...

5.3CVSS0.00866EPSS
SaveExploits0References5
Veracode
Veracode
•added 2017/11/01 6:57 a.m.•24 views

Information Disclosure Via Tracking Module

botbait is a tool that can be used to track bot and automated tools usage within the npm ecosystem. The module tracks user information such as source IP, process.versions, process.platform and how the module was invoked test, require, pre-install...

5.3CVSS5.2AI score0.00866EPSS
SaveExploits0References1Affected Software1
nodejs
nodejs
•added 2017/08/08 6:29 p.m.•48 views

Tracking Module

Overview The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked tes...

5CVSS3.1AI score0.00866EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder