Lucene search
+L

8 matches found

osv_mal
osv_mal
•added 2025/02/13 1:22 a.m.•14 views

MAL-2025-1299 Malicious code in kucoin-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7d98e81b91c8239a7b15024121674428fe1b62d3d9b001b73205b051391932b Any computer that has this package install...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/31 11:37 p.m.•11 views

Malicious code in babel-preset-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7766597c4e69a6b6b08fb89e552f8cff845299eb1b612ef107e5f3fcb96156 Any computer that has this package install...

7AI score
SaveExploits0References3
Mend
Mend
•added 2023/09/13 12:00 a.m.•4 views

MSC-2023-16367

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2023/08/08 12:00 a.m.•3 views

MSC-2023-15431

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2023/07/26 12:00 a.m.•3 views

MSC-2023-15044

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2023/07/25 12:00 a.m.•2 views

MSC-2023-14981

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

8.8CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2018/06/07 2:29 a.m.•64 views

CVE-2017-16205

The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

7.5CVSS7.5AI score0.01106EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/07 2:29 a.m.•17 views

Information disclosure

The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...

5CVSS7.4AI score0.01158EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder