CVE-2023-30759

The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an...

Malicious code in timify-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440654aa8c74a2e41a533db2f19a6979cd5863485d40295a5d007fec08638c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2015 Malicious code in timify-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440654aa8c74a2e41a533db2f19a6979cd5863485d40295a5d007fec08638c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-29900

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

Malicious code in clean-packager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2025-907 Malicious code in clean-packager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 262c927312d80c4f09dc74bcc93a7036c67a0e3c831d802ce8cbebc21b37e4b5 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...

MAL-2024-2441 Malicious code in grunt-frontend-packager (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in grunt-frontend-packager (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-34H3-8MW4-QW57 @electron/packager's build process memory potentially leaked into final executable

Impact A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory could contain sensitive information such as environment variables, secrets files, etc. Patches This issue is patched in 18.3.1 Workarounds No...

CVE-2024-29900

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

CVE-2024-29900

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

CVE-2024-29900

The CVE-2024-29900 entry concerns the Electron Packager project. Affected component: the bundling/packaging process used to create distributable Electron apps, specifically within @electron/packager. Root cause: a memory leak where a random segment of ~1–10 kB of Node.js heap memory allocated on ...

CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

CVE-2024-29900 @electron/packager's build process memory potentially leaked into final executable

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

CVE-2024-29900: Transmission of Private Resources into a New Sphere

Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files into folders ready for distribution. A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This...

Electron Packager security vulnerability

Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and enables the writing of cross-platform desktop applications using HTML and CSS. A security vulnerability exists in Electron Packager versio...

PT-2024-23121 · Unknown · Electron Packager

Name of the Vulnerable Software and Affected Versions: Electron Packager versions prior to 18.3.1 Description: A random segment of 1-10kb of Node.js heap memory allocated either side of a known buffer will be leaked into the final executable. This memory could contain sensitive information such a...

Malicious code in update-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594a5a70a75839b33f042d76c062a1d1d643b28f842472e9f5b0f95962aeb78f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in update-packager

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...