WS-2019-0193

lita-coin 0.0.3 contains a backdoor mechanism that allows launching of hidden cryptocurrency mining operations inside the project. The code also contained a backdoor mechanism that allowed the attacker to send a cookie file back to a compromised project, and allow the attacker to execute maliciou...

PT-2019-14021

Name of the Vulnerable Software and Affected Versions rest-client versions 1.6.10 through 1.6.13 lita-coin version 0.0.3 Description The rest-client gem for Ruby included a code-execution backdoor inserted by a third party, which allowed the execution of malicious commands and sent information to...