MAL-2025-20748 Malicious code in font-scrubber (npm)

The package font-scrubber was found to contain malicious code...

Malicious code in font-scrubber (npm)

The package font-scrubber was found to contain malicious code...

Malicious Package in font-scrubber

Version 1.2.2 of font-scrubber contains malicious code as a postinstall script. The package attempts to upload sensitive files from the system to a remote server. The files include configuration files, command history logs, SSH keys and /etc/passwd. Recommendation Any computer that has this packa...

GHSA-65J7-66P7-9XGF Malicious Package in font-scrubber

Version 1.2.2 of font-scrubber contains malicious code as a postinstall script. The package attempts to upload sensitive files from the system to a remote server. The files include configuration files, command history logs, SSH keys and /etc/passwd. Recommendation Any computer that has this packa...

PT-2020-21080

Name of the Vulnerable Software and Affected Versions font-scrubber version 1.2.2 Description The issue concerns malicious code in the postinstall script of the affected software, which attempts to upload sensitive system files to a remote server. These files include configuration files, command...

Malicious Package

Overview Version 1.2.2 of font-scrubber contains malicious code as a postinstall script. The package attempts to upload sensitive files from the system to a remote server. The files include configuration files, command history logs, SSH keys and /etc/passwd. Recommendation Any computer that has...