WS-2019-0411

colro-name contains a malicious code as a preinstall script. The package downloads a file from a remote server, executes it and opens a backdoor...

Malicious code in colro-name (npm)

The package colro-name was found to contain malicious code...

MAL-2025-17303 Malicious code in colro-name (npm)

The package colro-name was found to contain malicious code...

Malicious Package in colro-name

Version 9.0.0 of colro-name contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys...

PT-2020-21378

Name of the Vulnerable Software and Affected Versions colro-name version 9.0.0 Description The issue concerns malicious code in the preinstall script of the affected version, which downloads a file from a remote server, executes it, and opens a backdoor. This allows for potential full compromise ...