26 matches found
EUVD-2020-0627
Malware in sbrugna...
MAL-2025-22662 Malicious code in hosted-hubot (npm)
The package hosted-hubot was found to contain malicious code...
Malicious code in hubot-factoids-3ch01c (npm)
The package hubot-factoids-3ch01c was found to contain malicious code...
MAL-2025-22770 Malicious code in hubot-factoids-3ch01c (npm)
The package hubot-factoids-3ch01c was found to contain malicious code...
Malicious code in hubot-frostedio-env (npm)
The package hubot-frostedio-env was found to contain malicious code...
Malicious code in hosted-hubot (npm)
The package hosted-hubot was found to contain malicious code...
MAL-2025-22771 Malicious code in hubot-frostedio-env (npm)
The package hubot-frostedio-env was found to contain malicious code...
Malicious code in hubot-currencies (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6725 Malicious code in hubot-currencies (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in hubot-hangouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2013-7378
scripts/email.coffee in the Hubot Scripts module before 2.4.4 for Node.js allows remote attackers to execute arbitrary commands...
MAL-2022-3715 Malicious code in hubot-hostinger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c85959aca3460e18563c06764a271944b6b01c90c2f402f623e49ed439b5bbc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hubot-hostinger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c85959aca3460e18563c06764a271944b6b01c90c2f402f623e49ed439b5bbc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hubot-awex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0979056c49e5558c7b7321c0110f39d6860988491f1e249849d3f02c85468387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3714 Malicious code in hubot-awex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0979056c49e5558c7b7321c0110f39d6860988491f1e249849d3f02c85468387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5059 Malicious code in olx-hubot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6f13567eaeea713e45447a15fd6f75483e9d4f235554f3488ee9e4d430c2685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in olx-hubot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6f13567eaeea713e45447a15fd6f75483e9d4f235554f3488ee9e4d430c2685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Rocket.Chat: Unintended information disclosure in the Hubot Log files
Dear Rocket.Chat Team While inspecting our logs I noticed, that the OAuth Tokens are leaked in plaintext in the logs. I wanted to draw your attention to this, as this is a security vulnerability. See the attached Screenshot for a redacted log excerpt. In my opinion, the best approach here would b...
Potential Command Injection in hubot-scripts
Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module. Mitigating Factors The email script is not enabled by default, it has to be manually added to hubot's list of loaded scripts. Recommendation...
GHSA-HWCH-749C-RV63 Potential Command Injection in hubot-scripts
Versions 2.4.3 and earlier of hubot-scripts are vulnerable to a command injection vulnerablity in the hubot-scripts/package/src/scripts/email.coffee module. Mitigating Factors The email script is not enabled by default, it has to be manually added to hubot's list of loaded scripts. Recommendation...