Malicious Package

Overview All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that comput...

Oracle Primavera Gateway Multiple Vulnerabilities (Jul 2019 CPU)

According to its self-reported version number, the Oracle Primavera Gateway installation running on the remote web server is 15.x prior to 15.2.16, 16.x prior to 16.2.9, 17.x prior to 17.12.4, or 18.x prior to 18.8.6. It is, therefore, affected by multiple vulnerabilities: - An unspecified...

Malicious Package

alipayjsapi is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

next-util is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

ali-contributors is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

antd-cloud is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

alico is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

luna-mock is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

midway-dataproxy is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

cicada-render is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

diamond-clien is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

hsf-clients is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

node-buc is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

river-mock is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

tiar is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

qingting is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

retcodelog is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

Malicious Package

hpmm is a malicious package. The package retrieves system information and uploads it to a remote server. It also downloads a file from a malicious server and executes it...

Malicious Package

ali-contributor is a malicious package. The malicious package runs a pre-install script, load.js, that would upload system information to a remote server, and subsequently downloads and executes a file...

Malicious Package

Overview All versions of tiar contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...