Lucene search
K

6 matches found

OSV
OSV
added 2026/05/22 5:3 p.m.3 views

MAL-2026-4555 Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...

5.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/22 5:3 p.m.5 views

Malicious code in events-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5482b17f0abd8f4ae8fed4fa5c53ea035a15b252efec406ae65dfe3365a7412 [email protected] impersonates the events EventEmitter polyfill README and Travis badge copied verbatim from browserify/events and ships a...

5.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 8:25 p.m.12 views

MAL-2022-6255 Malicious code in spotify-eventemitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bfefa3eeb4c0a415c385266abb7dd2719fc3af7174b26baf471debe205ba6e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:25 p.m.2 views

Malicious code in spotify-eventemitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bfefa3eeb4c0a415c385266abb7dd2719fc3af7174b26baf471debe205ba6e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/05/05 4:0 p.m.9 views

GHSA-52RH-5RPJ-C3W6 Improper handling of multiline messages in node-irc

node-irc is a socket wrapper for the IRC protocol that extends Node.js' EventEmitter. The vulnerability allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. Incorrect handling of a CR character allowed for making part of...

8CVSS7.2AI score0.00509EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2022/05/05 4:0 p.m.21 views

Improper handling of multiline messages in node-irc

node-irc is a socket wrapper for the IRC protocol that extends Node.js' EventEmitter. The vulnerability allows an attacker to manipulate a Matrix user into executing IRC commands by having them reply to a maliciously crafted message. Incorrect handling of a CR character allowed for making part of...

8.8CVSS3.3AI score0.00509EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder