Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2025/11/24 11:06 p.m.•4 views

Malware in nitroping

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 11:06 p.m.•13 views

Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...

5.6AI score
SaveExploits0References17
osv_mal
osv_mal
•added 2025/11/24 11:06 p.m.•17 views

MAL-2025-191134 Malicious code in nitroping (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab13b3f9a9100541d146c2728a90d45bfe20125de13d0f39196f03259918c1b9 No a static rule matches and no traced-code findings of installer-side attack behavior were produced for this package version. There is no evidence o...

5.6AI score
SaveExploits0References17
vulnersOsv
vulnersOsv
•added 2025/11/24 11:06 p.m.•6 views

nitroping-react-native (>=0.2.2, <=0.2.14) potentially affected by unknown CVE via nitroping (0.2.14)

nitroping NPM version 0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on nitroping and may be impacted: - nitroping-react-native =0.2.2, =0.2.14 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191134...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/24 11:06 p.m.•5 views

nitroping-react-native (>=0.2.2, <=0.2.14) potentially affected by unknown CVE via nitroping (0.2.14)

nitroping NPM version 0.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on nitroping and may be impacted: - nitroping-react-native =0.2.2, =0.2.14 Source cves: unknown CVE Source advisory: GHSA-472X-2FX6-8GWX...

5.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/24 11:06 p.m.•5 views

EUVD-2025-199118

Malicious code in nitroping npm...

6.6AI score
SaveExploits0References4
Snyk
Snyk
•added 2025/11/24 8:33 p.m.•15 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
SaveExploits0References3
Rows per page
Query Builder