7 matches found
isms-builder
ISMS Builder Self-hosted Information Security Management System β open source, no cloud required π Wiki β Docker-Image-Nutzung & Umgebungsvariablen, Architektur & Module, FAQ, Mitwirken DE/EN β οΈ Security Warning: Fake repositories and copies distributing malware ISMS Builder has no packaged...
CVE-2019-5414
CVE-2019-5414 Fake repo...
MAL-2026-14051 Malicious code in @velliajs/discord (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c86edd3f7edd7d111df5621cb884fd0ef3d870c6c0719d587b7bb0f16f65b8d The package presents itself as a discord.js clone repository field points at the real github.com/discordjs/discord.js.git, README instructs import...
MAL-2026-12107 Malicious code in @wethenorth12/web3-utils-crypto (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6591661338a325995ebe471f7d8157c1be9458f38336c4c11032033b150108 On module load, index.js collects the host identifiers os.hostname, os.userInfo.username, home directory, platform, cwd and the entire process.env,...
isms-builder v1.37.0
ISMS Builder Self-hosted Information Security Management System β open source, no cloud required β οΈ Security Warning: Fake repositories and copies distributing malware ISMS Builder has no packaged "releases", installers, or downloadable ZIP files β the only legitimate source is this repository,...
Malicious Git HTTP Server For CVE-2018-17456
This module exploits CVE-2018-17456, which affects Git versions 2.14.5, 2.15.3, 2.16.5, 2.17.2, 2.18.1, and 2.19.1 and lower. When a submodule url which starts with a dash e.g "-u./payload" is passed as an argument to git clone, the file "payload" inside the repository is executed. This module...
Malicious Git HTTP Server For CVE-2017-1000117
This module exploits CVE-2017-1000117, which affects Git version 2.7.5 and lower. A submodule of the form 'ssh://' can be passed parameters from the username incorrectly. This can be used to inject commands to the operating system when the submodule is cloned. This module creates a fake git...