Malicious code in pinokio-redis (npm)

pinokio-redis is a malicious npm package and part of the multi-wave "forge-jsx" cross-platform RAT campaign Wave 4. It was published by npm account 'donimique' [email protected]. The package.json description 'Node.js integration layer for Autodesk Forge' and the bundled README.md literally...

MAL-2026-6938 Malicious code in pinokio-redis (npm)

pinokio-redis is a malicious npm package and part of the multi-wave "forge-jsx" cross-platform RAT campaign Wave 4. It was published by npm account 'donimique' [email protected]. The package.json description 'Node.js integration layer for Autodesk Forge' and the bundled README.md literally...

EUVD-2025-22467

Malicious code in bioql PyPI...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

PT-2025-30617 · Pinokio · Pinokio

Name of the Vulnerable Software and Affected Versions: Pinokio version 3.6.23 Description: A URL redirection issue exists in Pinokio version 3.6.23, allowing attackers to redirect users to attacker-controlled pages. Recommendations: Update Pinokio to a newer version that addresses this issue...

Pinokio Desktop 安全漏洞

Pinokio Desktop is a native AI application automation tool from Pinokio. A security vulnerability exists in Pinokio Desktop version v3.6.23, which stems from the URL redirection feature and could cause users to be redirected to a malicious page...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

A URL redirection in Pinokio v3.6.23 allows attackers to redirect victim users to attacker-controlled pages...

CVE-2025-44109

CVE-2025-44109 describes a URL redirection vulnerability in Pinokio v3.6.23 that can redirect victim users to attacker-controlled pages. Affected software: Pinokio Desktop (v3.6.23); underlying issue attributed to the URL redirection feature. Impact per CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A...