mini-shai-hulud-detector

미니 샤이훌루드 탐지기 Mini Shai-Hulud npm 공급망 공격CVE-2026-45321, CVSS 9.6을 위한 원커맨드 스캐너입니다. 중요: 토큰을 교체하기 전에 먼저 탐지하세요 이 웜은 자격 증명이 철회되는 것을 감지하면 rm -rf 를 실행하는 지속성 데몬gh-token-monitor을 설치합니다. 데몬이 제거되었는지 확인하기 전에는 GitHub PAT나 npm 토큰을 교체하지 마세요. 탐지 → 데몬 제거 → 그다음에 교체하세요. 사용법 curl -fsSL...

CVE-2026-49255

In electerm versions prior to 3.11.11, the rmrf(), mv(), and cp() functions in src/app/lib/fs.js interpolate untrusted file paths into shell command strings without escaping metacharacters. A malicious SSH/SFTP server can supply filenames like file"$(touch /tmp/pwned)" to break out of quotes and ...

WS-2020-0162

All versions of nagibabel contained malicious code. The package ran rm -rf on the current working directory...

WS-2019-0387

Anarchy is a malicious package that runs "rm - rf /" as an install script which will clear everything on your root partition...

CVE-2026-41501 electerm has Command Injection Vulnerability via runLinux function

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an...

EUVD-2026-28497

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an...

PT-2026-25520

Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...

Malicious Package

Overview All versions of nagibabel contained malicious code. The package ran rm -rf on the current working directory. Recommendation Remove the package from your environment...

PT-2020-21375

Name of the Vulnerable Software and Affected Versions anarchy versions affected versions not specified Description The issue concerns malicious code within the anarchy package, which executes a harmful command rm -rf / as part of its installation script. Recommendations Remove the anarchy package...

PT-2012-3105

Name of the Vulnerable Software and Affected Versions systemd versions prior to 44 Description The issue concerns the rm rf children function in util.c within the systemd-logind login manager. It allows local users to delete arbitrary files via a symlink attack on unspecified files related to use...

Linux/x86 - execve("rm -rf /")

No description provided by source. / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx push byte 0x2f mov edi, esp push edx push word 0x66...

linux/x86 rm -rf / attempts to block the process from being stopped

No description provided by source. / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax "\x89\xC1" // mov ecx, eax "\x41" // inc ecx "\xB0\x30" // mov al, 0x30 ;...

linux/x86 - rm -rf / attempts to block the process from being stopped

linux/x86 rm -rf / attempts to block the process from being stopped. Shellcode exploit for linx86 platform / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax...

linux/x86 execve(rm -rf /) shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 execverm -rf / shellcode 45 bytes ============================================= / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global sta...