GHSA-VCG5-9XW6-R56C Malicious Package in logsymbles

Version 2.2.0 of logsymbles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

GHSA-C6F3-3C98-2J2F Malicious Package in jquerz

Version 1.0.1 of jquerz contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

Malicious Package in jquerz

Version 1.0.1 of jquerz contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoor...

GHSA-FQW7-8V6M-2F86 Malicious Package in hulp

All versions of hulp contain malicious code as a preinstall script. When installed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and...

GHSA-2R8F-2665-3GXQ Malicious Package in froever

All versions of froever contain malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opened a backdoor...

Malicious Package in froever

All versions of froever contain malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opened a backdoor...

GHSA-8MMF-QP7J-2W24 Malicious Package in colour-string

Version 1.5.3 of colour-string contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and key...

Malicious Package in colro-name

Version 9.0.0 of colro-name contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys...

GHSA-JP9G-5X75-CCP8 Malicious Package in colro-name

Version 9.0.0 of colro-name contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys...

PT-2020-21282

Name of the Vulnerable Software and Affected Versions hulp versions affected versions not specified Description The issue concerns malicious code embedded in the hulp package as a preinstall script. Upon installation, the package establishes communication with a Command and Control server, allowi...

PT-2020-21159

Name of the Vulnerable Software and Affected Versions rimrafall version 1.0.0 Description The issue concerns malicious code in the preinstall script of the package, which attempts to delete all files in the system's root folder. If the package was installed, it is likely that the machine was...

PT-2020-21000

Name of the Vulnerable Software and Affected Versions browserift version 16.3.3 Description The issue concerns malicious code in the preinstall script of the affected software, which acts as a backdoor. This backdoor opens a connection to a remote server and executes incoming commands on both Uni...

PT-2020-21593

Name of the Vulnerable Software and Affected Versions bowee version 1.8.4 Description The issue concerns malicious code in the preinstall script of the affected version, which downloads a file from a remote server, executes it, and opens a backdoor. Any computer with this package installed or...

PT-2020-21554

Name of the Vulnerable Software and Affected Versions bowee version 1.8.4 Description The issue concerns malicious code in the preinstall script of the affected software. This code downloads a file from a remote server, executes it, and opens a backdoor, potentially leading to a full compromise o...

PT-2020-21378

Name of the Vulnerable Software and Affected Versions colro-name version 9.0.0 Description The issue concerns malicious code in the preinstall script of the affected version, which downloads a file from a remote server, executes it, and opens a backdoor. This allows for potential full compromise ...

PT-2020-21170

Name of the Vulnerable Software and Affected Versions colour-string version 1.5.3 Description The issue concerns malicious code in the preinstall script of the affected software. This code downloads a file from a remote server, executes it, and opens a backdoor, potentially giving an outside enti...

PT-2020-21385

Name of the Vulnerable Software and Affected Versions tensorplow versions affected versions not specified Description The issue concerns malicious code in the tensorplow package, which executes a preinstall script that calls home to a Command and Control server. This allows for the execution of...

Malicious Package

m-backdoor is a malicious package. The package contains a preinstall script that originates from a remote server. The script potentially allows an attacker to execute arbitrary code on the victim's system...

Malicious Package

yoeman-generator is a malicious package. The package contains malicious code existing as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...

Malicious Package

require-port is a malicious package. The package contains malicious code existing as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server,...