WS-2019-0410

colour-string contains a malicious code as a preinstall script. The package downloads a file from a remote server, executes it and opens a backdoor...

Malicious code in colour-string (npm)

The package colour-string was found to contain malicious code...

MAL-2025-17301 Malicious code in colour-string (npm)

The package colour-string was found to contain malicious code...

Malicious Package in colour-string

Version 1.5.3 of colour-string contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and key...

GHSA-8MMF-QP7J-2W24 Malicious Package in colour-string

Version 1.5.3 of colour-string contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and key...

PT-2020-21170

Name of the Vulnerable Software and Affected Versions colour-string version 1.5.3 Description The issue concerns malicious code in the preinstall script of the affected software. This code downloads a file from a remote server, executes it, and opens a backdoor, potentially giving an outside enti...

Malicious Package

Overview Version 1.5.3 of colour-string contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secret...