114 matches found
AuroraStore
Aurora Store Aurora Store enables you to search and download apps from the official Google Play store. You can check app descriptions, screenshots, updates, reviews, and download the APK directly from Google Play to your device. To use Aurora Store, log in using Google Play account, when you firs...
Malicious Package
Overview exodus-firestore-synchronize is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in exodus-firestore-synchronize (npm)
Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matching /TOKEN|SECRET|KEY|AUTH|npm/i and prints the matches to...
@exodus/storage-memory (2.0.0) potentially affected by CVE-2026-107353 via traverse (0.3.9)
traverse NPM version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on traverse and may be impacted: - @exodus/storage-memory 2.0.0 Source cves: CVE-2026-107353 Source advisory: SNYK:JS-TRAVERSE-20570510...
@exodus/storage-memory (2.0.0) potentially affected by CVE-2026-107353 via traverse (0.3.9)
traverse NPM version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on traverse and may be impacted: - @exodus/storage-memory 2.0.0 Source cves: CVE-2026-107353 Source advisory: MEND:CVE-2026-107353...
Malicious code in exodus-firestore-synchronize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...
MAL-2026-16533 Malicious code in exodus-firestore-synchronize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...
Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm)
The package a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in exodus-ethereum-sdk (npm)
Source: amazon-inspector b4e52a42f8980da0a9df361ef772ca31bbdaec85eb3fc7a73dbcfc8b5ca6894a Package name impersonates the Exodus cryptocurrency wallet brand and ships no real functionality src/index.js exports an empty object; package.json self-describes as a 'HackerOne PoC'. The package.json...
Malicious code in exodus-secure-container (npm)
Source: amazon-inspector 92bc77b12251baa18392bd90e84d6bdc57aaef9a8c774f8cb29a0066e80f76b5 On npm install, the package runs node src/canary.js as a postinstall hook. That script performs a DNS lookup and HTTPS GET to the hardcoded host 96e03fa6c292469a-172-245-86-254.serveousercontent.com/c — an...
Malicious code in exodus-solana-sdk (npm)
Source: amazon-inspector ecffe98bff5e1c4655631cf8f92b1b1ccb534e0eeaa7043fab0d5fa1fbfabc35 Package name impersonates the Exodus cryptocurrency wallet brand exodus-solana-sdk. package.json declares a postinstall hook node src/canary.js that fires automatically on npm install. canary.js performs a D...
Malicious code in exodus-wallet-core (npm)
Source: amazon-inspector 53bf93b626689e980ef2e9c4ba33fd95e81d6a04c665f85908c8cf07b8b36e14 Package name impersonates the Exodus cryptocurrency wallet brand. package.json declares "postinstall": "node src/canary.js", and src/canary.js performs a DNS lookup and HTTPS GET to a hardcoded Serveo...
Malicious code in exodus-checkout-signer (npm)
Source: amazon-inspector 921c5ef246587db452bdb65aae12321f4de868e7882f9550f9b9e32300ae792c exodus-checkout-signer is the unscoped name of the scoped package @exodus/checkout-signer and self-describes in README and package.json as a dependency-confusion proof-of-concept targeting installers who...
Malicious code in exodus-checkout (npm)
--- Credit: OpenSSF source...
Malicious code in exodus-payments (npm)
--- Credit: OpenSSF source...
Malicious code in exodus-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...
MAL-2026-10895 Malicious code in exodus-payments (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51394e5297d9dc765ee318eabd49e400b9f843c342ed91e3df9bd9befc84254e Package is self-identified as a dependency-confusion proof-of-concept. Its postinstall hook src/canary.js performs a DNS lookup and HTTPS GET to a...
MAL-2026-10894 Malicious code in exodus-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...
Malicious code in exodus-checkout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10e41b9a87dc4927d3c4bc63b25bc1fa438cfae1bcf5f1d483204a18d5765f6 Package exodus-checkout self-identifies as a security-research dependency-confusion proof-of-concept targeting an internal Exodus payments SDK. It...
Malicious code in node-pino (npm)
node-pino is a one-edit typosquat of the popular pino logger that ships repackaged winston plus a malicious postinstall dropper. On npm install, the postinstall hook npm run license - node lib/winston/license spawns a DETACHED, unref'd child process that reads an AES-256-CBC-encrypted blob...