Malware in pinokio-redis

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview pinokio-redis is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in pinokio-redis (npm)

pinokio-redis is a malicious npm package and part of the multi-wave "forge-jsx" cross-platform RAT campaign Wave 4. It was published by npm account 'donimique' [email protected]. The package.json description 'Node.js integration layer for Autodesk Forge' and the bundled README.md literally...

MAL-2026-6938 Malicious code in pinokio-redis (npm)

pinokio-redis is a malicious npm package and part of the multi-wave "forge-jsx" cross-platform RAT campaign Wave 4. It was published by npm account 'donimique' [email protected]. The package.json description 'Node.js integration layer for Autodesk Forge' and the bundled README.md literally...

EUVD-2025-22467

Malicious code in bioql PyPI...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

PT-2025-30617 · Pinokio · Pinokio

Name of the Vulnerable Software and Affected Versions: Pinokio version 3.6.23 Description: A URL redirection issue exists in Pinokio version 3.6.23, allowing attackers to redirect users to attacker-controlled pages. Recommendations: Update Pinokio to a newer version that addresses this issue...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection vulnerability exists in Pinokio version 3.6.23 , a native AI application automation tool. This flaw allows attackers to redirect victim users to attacker-controlled pages . Remediation involves updating Pinokio to a newer version that addresses this issue. Exploitation details a...

CVE-2025-44109: URL Redirection to Untrusted Site

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

Pinokio Desktop security vulnerabilities

Pinokio Desktop is a native AI application automation tool from Pinokio. A security vulnerability exists in Pinokio Desktop version v3.6.23, which stems from the URL redirection feature and could cause users to be redirected to a malicious page...