Lucene search
K

13 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.2 views

Malicious code in botbait (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00f27c0dc2d4ad5be71cea265f3225e0eec5a36977a27f13aa5eef9a7ee3a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:13 p.m.6 views

MAL-2022-1657 Malicious code in botbait (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f00f27c0dc2d4ad5be71cea265f3225e0eec5a36977a27f13aa5eef9a7ee3a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 6:57 p.m.41 views

Tracking Module in botbait

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked test, requir...

5.3CVSS3.1AI score0.00232EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/01 6:57 p.m.10 views

GHSA-4R5X-QJQC-P579 Tracking Module in botbait

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked test, requir...

5.3CVSS5.1AI score0.00232EPSS
Exploits0References2
CNVD
CNVD
added 2018/06/20 12:0 a.m.1 views

botbait Information Disclosure Vulnerability

botbait is a tool used in the npm ecosystem for tracking bot and automation tool usage. An information disclosure vulnerability exists in botbait. An attacker could exploit this vulnerability to disclose information...

5.3CVSS4.9AI score0.00232EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.72 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.3AI score0.17051EPSS
Exploits4References101
NVD
NVD
added 2018/06/07 2:29 a.m.5 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.2AI score0.00232EPSS
Exploits0References1
OSV
OSV
added 2018/06/07 2:29 a.m.0 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.3CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2018/06/07 2:29 a.m.9 views

Code injection

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5CVSS5.2AI score0.00232EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/07 2:0 a.m.11 views

CVE-2017-16126

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked test, require,...

5.2AI score0.00232EPSS
Exploits0References1
CVE
CVE
added 2018/06/07 2:0 a.m.50 views

CVE-2017-16126

The CVE-2017-16126 issue concerns the npm module botbait, which tracks user information within the npm ecosystem. Affected component: the botbait module; described data collection includes Source IP, process.versions, process.platform, and how the module was invoked (test, require, pre-install). ...

5.3CVSS5.2AI score0.00232EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2017/11/01 6:57 a.m.13 views

Information Disclosure Via Tracking Module

botbait is a tool that can be used to track bot and automated tools usage within the npm ecosystem. The module tracks user information such as source IP, process.versions, process.platform and how the module was invoked test, require, pre-install...

5.3CVSS5.2AI score0.00232EPSS
Exploits0References1Affected Software1
Node.js
Node.js
added 2017/08/08 6:29 p.m.24 views

Tracking Module

Overview The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked tes...

5CVSS3.1AI score0.00232EPSS
Exploits0Affected Software1
Rows per page
Query Builder