Lucene search
+L

485 matches found

Github Security Blog
Github Security Blog
added 2018/11/01 2:47 p.m.25 views

node-tkinter is malware

The node-tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01083EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/11/01 2:47 p.m.17 views

GHSA-RWG6-3FMJ-W4WX tkinter is malware

The tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern...

7.5CVSS7.6AI score0.01111EPSS
Exploits0References2
OSV
OSV
added 2018/10/10 5:28 p.m.32 views

GHSA-894F-RW44-QRW5 mongose is malware

The mongose package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern...

7.5CVSS7.6AI score0.01239EPSS
Exploits1References3
OSV
OSV
added 2018/10/10 5:28 p.m.11 views

GHSA-J68R-23HJ-XF9C node-openssl is malware

The node-openssl package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/10/10 5:28 p.m.36 views

node-openssl is malware

The node-openssl package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/10/03 8:27 p.m.38 views

GHSA-646X-M363-9RH4 node-opensl is malware

The node-opensl package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/10/03 8:27 p.m.24 views

node-opensl is malware

The node-opensl package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/09/17 8:39 p.m.20 views

GHSA-5CV7-R488-WC5X noderequest is malware

The noderequest package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
OSV
OSV
added 2018/08/29 11:57 p.m.22 views

GHSA-72HV-RP4Q-Q7F3 babelcli is malware

The babelcli package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concer...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
OSV
OSV
added 2018/08/29 11:56 p.m.36 views

GHSA-3WXQ-7R8M-QPMG ffmepg is malware

The ffmepg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern ...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:56 p.m.35 views

ffmepg is malware

The ffmepg package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern ...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:50 p.m.34 views

GHSA-4X37-5RH2-HP8C node-opencv is malware

The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:50 p.m.26 views

node-opencv is malware

The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:45 p.m.11 views

GHSA-22GQ-X6PG-752J openssl.js is malware

The openssl.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:45 p.m.28 views

openssl.js is malware

The openssl.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:43 p.m.16 views

GHSA-J866-8VXX-27HX nodemailer.js is malware

The nodemailer.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:43 p.m.48 views

nodemailer.js is malware

The nodemailer.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01177EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:40 p.m.12 views

GHSA-XH56-3F5W-9H25 nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.6AI score0.01123EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2018/08/29 11:40 p.m.22 views

nodemailer-js is malware

The nodemailer-js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...

7.5CVSS7.3AI score0.01123EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/08/29 11:38 p.m.24 views

GHSA-2WPQ-VVW6-67WR nodecaffe is malware

The nodecaffe package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security conce...

7.5CVSS7.6AI score0.01177EPSS
Exploits0References2
Rows per page
Query Builder