Malicious code in hubot-frostedio-env (npm)

The package hubot-frostedio-env was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hubot-factoids-3ch01c (npm)

The package hubot-factoids-3ch01c was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in hubot-currencies (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in hosted-hubot (npm)

The package hosted-hubot was found to contain malicious code. --- Credit: OpenSSF source...

@blitzbank/dashboard (>=0.0.1, <=0.0.2), @coinmesh/lnd-adapter (>=0.0.1, <=0.2.12) +16 more potentially affected by unknown CVE via express-basic-auth (>=0.1.3, <=1.1.7)

express-basic-auth NPM version =0.1.3, =0.0.1, =0.0.1, =2.0.0, =1.0.0, =0.1.5, =3.0.0-RC.1, =1.0.1, =1.0.0, =0.1.5, =0.0.1, =1.0.0, =0.1.0, =2.2.2 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0059...

EUVD-2020-0627

Malware in sbrugna...

MAL-2025-22662 Malicious code in hosted-hubot (npm)

The package hosted-hubot was found to contain malicious code...

MAL-2025-22770 Malicious code in hubot-factoids-3ch01c (npm)

The package hubot-factoids-3ch01c was found to contain malicious code...

Malicious code in hubot-factoids-3ch01c (npm)

The package hubot-factoids-3ch01c was found to contain malicious code...

MAL-2025-22771 Malicious code in hubot-frostedio-env (npm)

The package hubot-frostedio-env was found to contain malicious code...

Malicious code in hosted-hubot (npm)

The package hosted-hubot was found to contain malicious code...

Malicious code in hubot-frostedio-env (npm)

The package hubot-frostedio-env was found to contain malicious code...

Malicious code in hubot-currencies (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6725 Malicious code in hubot-currencies (npm)

The package communicates with a domain associated with malicious activity...

Malware in hubot-hangouts

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in hubot-hangouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2013-7378

scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands...

net.praqma:memory-map (>=2.2.0, <=2.2.1), org.jenkins-ci.plugins.workflow:workflow-aggregator (2.4) +1 more potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (2.5)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - net.praqma:memory-map =2.2.0, =1.0.0, =1.0.1 Source cves:...

io.jenkins.blueocean:blueocean (>=1.0.0-b15, <=1.0.0-b21), io.jenkins.blueocean:blueocean-github-pipeline (>=1.0.0-b15, <=1.0.0-b21) +7 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (2.3)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b15,...

io.jenkins.blueocean:blueocean (>=1.1.6, <=1.1.7), io.jenkins.blueocean:blueocean-events (>=1.1.6, <=1.1.7) +6 more potentially affected by CVE-2022-34177 via org.jenkins-ci.plugins:pipeline-input-step (2.8)

org.jenkins-ci.plugins:pipeline-input-step MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:pipeline-input-step and may be impacted: - io.jenkins.blueocean:blueocean =1.1.6, =1.1.6, =1.1.6, =1.1.6, =2.0.0, =1.7,...