Malicious Package in my-very-own-package

All versions of my-very-own-package contain malicious code. The package sends the output of process.versions, process.arch and process.platform to a remote server in a postinstall script. Recommendation Remove the package from your environment. There are no further signs of compromise...

GHSA-CRR2-PH72-C52G Malicious Package in my-very-own-package

All versions of my-very-own-package contain malicious code. The package sends the output of process.versions, process.arch and process.platform to a remote server in a postinstall script. Recommendation Remove the package from your environment. There are no further signs of compromise...

GHSA-X87G-RGRH-R6G3 Malicious Package in rpc-websocket

Versions of rpc-websocket = 0.7.6 contained malicious code. The package opens a backdoor to a remote server and executes arbitrary commands, effectively acting as a backdoor. Recommendation Any computer that has these versions of the package installed or running should be considered fully...

Malicious Package in rpc-websocket

Versions of rpc-websocket = 0.7.6 contained malicious code. The package opens a backdoor to a remote server and executes arbitrary commands, effectively acting as a backdoor. Recommendation Any computer that has these versions of the package installed or running should be considered fully...

Malicious Package in smartsearchwp

All versions of smartsearchwp contain malicious code. The package is malware intended to steal credentials from websites it is loaded in. It traverses DOM elements looking for fields such as username and password and uploads it to a remote server. The package also port-scans the local gateway and...

GHSA-VV52-3MRP-455M Malicious Package in m-backdoor

All versions of m-backdoor contain malicious code. The package downloads a file from a remote server and executes it as a preinstall script. At the time of the release of this advisory the downloaded file only defaces websites by removing elements randomly from the DOM. Recommendation Remove the...

Malicious Package

is a malicious package. The package contains a backdoor that opens a connection to a remote server and executes incoming commands...

Malicious Package

is a malicious package. The package contains a backdoor that opens a connection to a remote server and executes incoming commands...

Malicious Package

colour-string is a malicious package. The package contains a backdoor that opens a connection to a remote server and executes incoming commands...

Malicious Package

browserift is a malicious package. The package contains a backdoor that opens a connection to a remote server and executes incoming commands...

Malicious Package in ngx-pica

Version 1.1.5 of ngx-pica contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate your...

PT-2020-21252

Name of the Vulnerable Software and Affected Versions my-very-own-package versions all Description The issue concerns malicious code in the package that sends sensitive information, including the output of process.versions, process.arch, and process.platform, to a remote server during the...

PT-2020-21173

Name of the Vulnerable Software and Affected Versions appx-compiler versions affected versions not specified Description The issue concerns malicious code within the appx-compiler package, which uploads system information to a remote server, downloads a file, and executes it. This indicates a...

PT-2020-21553

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including OS and hostname, to a remote server. There are no indications of further compromise. Recommendations Remove the...

PT-2020-21364

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including the operating system and hostname, to a remote server. There are no indications of further compromise...

PT-2020-21090

Name of the Vulnerable Software and Affected Versions discord.js-user versions affected versions not specified Description The issue concerns malicious code in the discord.js-user package that uploads the user's Discord token to a remote server. Recommendations Remove the discord.js-user package...

PT-2020-21286

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including OS and hostname, to a remote server. There are no indications of further compromise. Recommendations Remove the...

PT-2020-21512

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including OS and hostname, to a remote server. There are no indications of further compromise. Recommendations Remove the...

PT-2020-21295

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including OS and hostname, to a remote server. There are no indications of further compromise. Recommendations Remove the...

PT-2020-21223

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including OS and hostname, to a remote server. There are no indications of further compromise. Recommendations Remove the...