MAL-2025-22622 Malicious code in hooka-tools (npm)

The package hooka-tools was found to contain malicious code...

Malicious code in hooka-tools (npm)

The package hooka-tools was found to contain malicious code...

Silently Runs Cryptocoin Miner in hooka-tools

Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background. All affected versions have been unpublished from the npm registry. Recommendation While this module has been unpublished, some versions may exist in mirrors or caches. Do not insta...

GHSA-M36M-X4C5-RJXJ Silently Runs Cryptocoin Miner in hooka-tools

Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background. All affected versions have been unpublished from the npm registry. Recommendation While this module has been unpublished, some versions may exist in mirrors or caches. Do not insta...

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Malicious Package

hooka-tools is a malicious package. The package was updated to secretly mine cryptocurrency on the system it is installed on...