Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•4 views

Malicious code in hooka-tools (npm)

The package hooka-tools was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•11 views

MAL-2025-22622 Malicious code in hooka-tools (npm)

The package hooka-tools was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•13 views

Malicious code in hooka-tools (npm)

The package hooka-tools was found to contain malicious code...

7AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/01 7:01 p.m.•21 views

GHSA-M36M-X4C5-RJXJ Silently Runs Cryptocoin Miner in hooka-tools

Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background. All affected versions have been unpublished from the npm registry. Recommendation While this module has been unpublished, some versions may exist in mirrors or caches. Do not insta...

7.2AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/01 7:01 p.m.•36 views

Silently Runs Cryptocoin Miner in hooka-tools

Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background. All affected versions have been unpublished from the npm registry. Recommendation While this module has been unpublished, some versions may exist in mirrors or caches. Do not insta...

4.3AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/01 12:00 a.m.•5 views

PT-2020-21386

Name of the Vulnerable Software and Affected Versions hooka-tools versions affected versions not specified Description The issue concerns compromised and modified versions of hooka-tools that silently run a cryptocoin miner in the background. All affected versions have been removed from the npm...

5.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/06/12 12:00 a.m.•324 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.6AI score0.03278EPSS
SaveExploits4References108
Veracode
Veracode
•added 2017/12/18 1:33 a.m.•17 views

Malicious Package

hooka-tools is a malicious package. The package was updated to secretly mine cryptocurrency on the system it is installed on...

6.6AI score
SaveExploits0
Rows per page
Query Builder