EUVD-2018-0195

Malware in sbrugna...

EUVD-2020-0290

Malware in sbrugna...

EUVD-2021-0886

Malware in sbrugna...

EUVD-2021-1965

Malware in sbrugna...

EUVD-2019-0510

Malware in sbrugna...

EUVD-2019-0574

Malware in sbrugna...

EUVD-2019-0328

Malware in sbrugna...

EUVD-2018-0740

Malware in sbrugna...

EUVD-2020-1433

Malware in sbrugna...

EUVD-2018-0333

Malware in sbrugna...

EUVD-2020-0307

Malware in sbrugna...

EUVD-2022-4566

Malicious code in bioql PyPI...

MAL-2025-26516 Malicious code in mjb-playground-publishing-a-npm-module (npm)

The package mjb-playground-publishing-a-npm-module was found to contain malicious code...

MAL-2025-19882 Malicious code in eta-chi-socket-easy-module (npm)

The package eta-chi-socket-easy-module was found to contain malicious code...

MAL-2025-29602 Malicious code in prasang (npm)

The package prasang was found to contain malicious code...

CVE-2020-7597

codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is executed by the exec function within lib/codecov.js. This vulnerability exists due to an incomplete fix of CVE-2020-7596...

CVE-2020-7596

Codecov npm module before 3.6.2 allows remote attackers to execute arbitrary commands via the "gcov-args" argument...

CVE-2019-5480

A path traversal vulnerability in = v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders...

CVE-2019-10783

All versions including 0.0.4 of lsof npm module are vulnerable to Command Injection. Every exported method used by the package uses the exec function to parse user input...

Malicious code in module-grab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb37f88f9f6a37fa239ee1d591acdd1ee642b1d6447cba12accde00c474a94bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...