Lucene search
+L

7 matches found

Mend
Mend
•added 2026/05/14 9:15 a.m.•2 views

WS-2019-0444

Version 1.0.0 of logsymbles contains malicious code as a preinstall script. The package is malware that when installed, downloads a file from a remote server, executes it and opens a backdoor...

10CVSS6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•7 views

MAL-2025-25557 Malicious code in logsymbles (npm)

The package logsymbles was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in logsymbles (npm)

The package logsymbles was found to contain malicious code...

7AI score
SaveExploits0
osv_ghsa
osv_ghsa
•added 2020/09/02 9:40 p.m.•18 views

GHSA-VCG5-9XW6-R56C Malicious Package in logsymbles

Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

9.8CVSS7.3AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 9:40 p.m.•44 views

Malicious Package in logsymbles

Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

3.8AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•0 views

PT-2020-21515

Name of the Vulnerable Software and Affected Versions logsymbles version 2.2.0 Description The issue concerns a malicious package designed to exploit typographical errors when installing modules. Upon installation, it downloads and executes a file from a remote server, establishing a backdoor. Th...

9.8CVSS5.9AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/06/03 3:18 p.m.•21 views

Malicious Package

Overview Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a...

7.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder