11 matches found
deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)
jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: GHSA-8W6H-2JF5-8GVF...
EUVD-2018-0374
Malware in sbrugna...
Malicious code in jquey (npm)
The package jquey was found to contain malicious code...
deletenewf (1.0.0), itheima-tool-time (1.0.0) +1 more potentially affected by unknown CVE via jquey (0.0.1-security)
jquey NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on jquey and may be impacted: - deletenewf 1.0.0 - itheima-tool-time 1.0.0 - untitledfedorsh 1.2.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23906...
MAL-2025-23906 Malicious code in jquey (npm)
The package jquey was found to contain malicious code...
jquey is malware
The jquey package is malware that attempts to discover and exfiltrate sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found jquey installed in your...
GHSA-6FJR-M7V6-FPG9 jquey is malware
The jquey package is malware that attempts to discover and exfiltrate sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found jquey installed in your...
CVE-2017-16204
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...
CVE-2017-16204
The jquey package is malware that exfiltrates sensitive data (e.g., private SSH keys and bash history) to attacker-controlled locations during installation. Affected scope is all versions of jquey, which have been unpublished from npm. Mitigation provided in the sources includes removing the pack...
PT-2018-6231
Name of the Vulnerable Software and Affected Versions: jquey versions affected versions not specified Description: The jquey module is malware that attempts to discover and exfiltrate sensitive data, including a user's private SSH key and bash history, sending them to attacker-controlled location...
CVE-2017-16204: Embedded Malicious Code
The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation...