GHSA-8MM3-2MCJ-CX6R Malicious Package in angluar-cli

Version 0.0.3 of angluar-cli contains malicious code as a postinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed the package attempts to remove files and stop processes related to McAfee antivirus...

Malicious Package in shrugging-logging

All versions of shrugging-logging contain malicious code as a postinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own...

PT-2020-21169

Name of the Vulnerable Software and Affected Versions angular-cli version 0.0.3 Description The issue concerns malicious code in a postinstall script. This malware is designed to exploit typing mistakes when installing modules, targeting macOS users. Upon installation, it attempts to remove files...

PT-2020-21468

Name of the Vulnerable Software and Affected Versions shrugging-logging versions affected versions not specified Description The issue concerns malicious code in the shrugging-logging package, specifically a postinstall script. This script fetches the names of npm packages owned by the user and...

Malicious Package in harmlesspackage

Version 0.0.1 of harmlesspackage contains malicious code as a postinstall script. The package printed a message to the console and performed a GET request to a remote server. Recommendation Remove the package from your environment. There is no evidence of further compromise...

GHSA-8HMR-W35F-3QGJ Malicious Package in harmlesspackage

Version 0.0.1 of harmlesspackage contains malicious code as a postinstall script. The package printed a message to the console and performed a GET request to a remote server. Recommendation Remove the package from your environment. There is no evidence of further compromise...

GHSA-JF8X-WG7F-P3W8 Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...

GHSA-G9WF-393Q-4W38 Malicious Package in only-test-not-install

All versions of only-test-not-install contain malicious code. The package deletes the folder /test from the system as a postinstall script. Recommendation Remove the package from your environment. There are no further signs of compromise...

Malicious Package in my-very-own-package

All versions of my-very-own-package contain malicious code. The package sends the output of process.versions, process.arch and process.platform to a remote server in a postinstall script. Recommendation Remove the package from your environment. There are no further signs of compromise...

Malicious Package in maybemaliciouspackage

All versions of maybemaliciouspackage contain malicious code. The package prints the system's SSH keys to the console as a postinstall script. Recommendation Remove the package from your environment. There are no further signs of compromise...

PT-2020-21304

Name of the Vulnerable Software and Affected Versions only-test-not-install versions affected versions not specified Description The issue concerns malicious code within the package that deletes the folder /test from the system as a postinstall script. There are no further signs of compromise...

PT-2020-21252

Name of the Vulnerable Software and Affected Versions my-very-own-package versions all Description The issue concerns malicious code in the package that sends sensitive information, including the output of process.versions, process.arch, and process.platform, to a remote server during the...

PT-2020-21158

Name of the Vulnerable Software and Affected Versions harmlesspackage version 0.0.1 Description The issue concerns malicious code embedded in the postinstall script of the package. This script prints a message to the console and performs a GET request to a remote server. Recommendations Remove th...

PT-2020-21400

Name of the Vulnerable Software and Affected Versions maybemaliciouspackage affected versions not specified Description The issue concerns malicious code within the package that executes a postinstall script, printing the system's SSH keys to the console. There are no further signs of compromise...

PT-2020-21371

Name of the Vulnerable Software and Affected Versions cage-js versions all Description The issue concerns malicious code in the software that downloads and runs a script from a remote server as a postinstall script. Any computer with this package installed should be considered fully compromised,...

GHSA-W3F3-4J22-2V3P Malicious Package in destroyer-of-worlds

The package destroyer-of-worlds contained malicious code. The package contained a bash script that was run as a postinstall script. The script deleted system files and attempted to exhaust resources by creating a large file, a fork bomb and an endless loop. The script targeted UNIX systems...

PT-2020-21274

Name of the Vulnerable Software and Affected Versions kraken-api version 0.1.8 Description The issue concerns malicious code in the postinstall script of the affected version, which contacts a Command and Control server to execute arbitrary commands, potentially leading to full compromise of the...

PT-2020-21080

Name of the Vulnerable Software and Affected Versions font-scrubber version 1.2.2 Description The issue concerns malicious code in the postinstall script of the affected software, which attempts to upload sensitive system files to a remote server. These files include configuration files, command...

PT-2020-21537

Name of the Vulnerable Software and Affected Versions destroyer-of-worlds affected versions not specified Description The issue concerns a package that contains malicious code, specifically a bash script run as a postinstall script. This script is designed to delete system files and exhaust syste...