Malicious code in house-click (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011a97ac4f78a9eb346b6a7fc5b087039824806b7cb064cceea2fc4c22b9d743 The package house-click was found to contain malicious code...

EUVD-2015-8640

Malware in sbrugna...

EUVD-2016-2674

Malware in sbrugna...

CVE-2016-1579 UDM doesn't check for confinement before running post-processing commands

UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UD...