PT-2020-21282

Name of the Vulnerable Software and Affected Versions hulp versions affected versions not specified Description The issue concerns malicious code embedded in the hulp package as a preinstall script. Upon installation, the package establishes communication with a Command and Control server, allowi...

PT-2020-21170

Name of the Vulnerable Software and Affected Versions colour-string version 1.5.3 Description The issue concerns malicious code in the preinstall script of the affected software. This code downloads a file from a remote server, executes it, and opens a backdoor, potentially giving an outside enti...

PT-2020-21554

Name of the Vulnerable Software and Affected Versions bowee version 1.8.4 Description The issue concerns malicious code in the preinstall script of the affected software. This code downloads a file from a remote server, executes it, and opens a backdoor, potentially leading to a full compromise o...

PT-2020-21378

Name of the Vulnerable Software and Affected Versions colro-name version 9.0.0 Description The issue concerns malicious code in the preinstall script of the affected version, which downloads a file from a remote server, executes it, and opens a backdoor. This allows for potential full compromise ...

PT-2020-21385

Name of the Vulnerable Software and Affected Versions tensorplow versions affected versions not specified Description The issue concerns malicious code in the tensorplow package, which executes a preinstall script that calls home to a Command and Control server. This allows for the execution of...

PT-2020-21593

Name of the Vulnerable Software and Affected Versions bowee version 1.8.4 Description The issue concerns malicious code in the preinstall script of the affected version, which downloads a file from a remote server, executes it, and opens a backdoor. Any computer with this package installed or...

Malicious Package

m-backdoor is a malicious package. The package contains a preinstall script that originates from a remote server. The script potentially allows an attacker to execute arbitrary code on the victim's system...

Malicious Package

yoeman-generator is a malicious package. The package contains malicious code existing as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...

Malicious Package

require-port is a malicious package. The package contains malicious code existing as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...

Malicious Package

log-symboles is a malicious package. The package contains malicious code exeisting as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...

Malicious Package

8.9.4 is a malicious package. The package contains malicious code existing as a preinstall script. The package reads the system's SSH keys but does not upload it to a remote server...

Malicious Package

emberclibabe is a malicious package. The package contains malicious code existing as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...

Malicious Package

Overview Versions 1.0.2, 1.0.3, 1.0.4 and 1.0.5 of 8.9.4 contain malicious code as a preinstall script. The package reads the system's SSH keys but does not upload it to a remote server. Recommendation Remove the package from your environment. There is no evidence of further compromise at the...

Malicious Package

Overview All versions of sdfjghlkfjdshlkjdhsfg contain malicious code. The package is essentially a worm that fetches all packages owned by the user, adds a script to self-replicate as a preinstall script and publishes a new version. Recommendation Remove the package from your environment and...

Exploit for Improper Input Validation in Apple Mac_Os_X

CVE-2019-8561 Proof of concept exploit for CVE-2019-8561 disc...

Malicious Package

Overview All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you...

Malicious Package

Overview Version 1.0.0 of rimrafall contains malicious code as a preinstall script. The package attempts to remove all files in the system's root folder. Recommendation If you installed this package it is likely your machine was erased. If not, remove the package from your system and verify if an...

Malicious Package

Overview All versions of hulp contain malicious code as a preinstall script. When installed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Any computer that has this package installed or running should be considered fully compromised. All...

Malicious Package

Overview All versions of froever contain malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opened a...

Malicious Module

bowee has a malicious module in the form of a preinstall script. The script gets a backdoor file from a remote server and executes it, subsequently giving full control of the computer to an external malicious entity...