79 matches found
Malicious Package
Overview simplisafe-gatsby is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in simplisafe-gatsby
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in simplisafe-gatsby (npm)
Source: amazon-inspector 564baff2e47527f159c52c527e1ea2b93d73625f94737f4397cff99311871a18 On npm install, the package's preinstall hook package.json declares "preinstall": "node index.js" executes index.js, which collects the installer's hostname, username, home directory, DNS configuration,...
simplisafe-python (>=9.0.3, <=9.0.5) potentially affected by CVE-2026-48804 via python-socketio (4.5.0)
python-socketio PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - simplisafe-python =9.0.3, =9.0.5 Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...
aioambient (>=1.1.0, <=1.1.1), convo-nlu (0.1.0) +12 more potentially affected by CVE-2026-48804 via python-socketio (4.5.1)
python-socketio PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient =1.1.0, =2020.1.0b2, =1.10.0a2, =0.1.0, =0.1.0, =0.1.2, =1.0.0, =9.0.6, =9.2.0 Source cves: CVE-2026-48804 Source...
aioambient (>=1.0.3, <=1.0.4), rasa (>=1.8.0, <=1.10.0a1) +1 more potentially affected by CVE-2026-48802 via python-engineio (3.11.2)
python-engineio PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.0.3, =1.8.0, =1.10.0a1 - simplisafe-python 9.0.3 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...
aioambient (>=1.0.3, <=1.0.4), rasa (>=1.8.0, <=1.10.0a1) +1 more potentially affected by CVE-2026-48809 via python-engineio (3.11.2)
python-engineio PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.0.3, =1.8.0, =1.10.0a1 - simplisafe-python 9.0.3 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...
aioambient (>=1.1.0, <=1.1.1), convo-nlu (0.1.0) +12 more potentially affected by CVE-2026-48802 via python-engineio (3.12.1)
python-engineio PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.1.0, =2020.1.0b2, =1.10.0a2, =0.1.0, =0.1.0, =0.1.2, =1.0.0, =9.0.4, =9.2.0 Source cves: CVE-2026-48802 Source...
aioambient (1.2.0), baseweb (0.0.5) +1 more potentially affected by CVE-2026-48802 via python-engineio (3.13.1)
python-engineio PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - simplisafe-python 9.2.1 Source cves: CVE-2026-48802 Source advisory: OSV:PYSEC-2026-3032...
aioambient (1.2.0), baseweb (0.0.5) +1 more potentially affected by CVE-2026-48809 via python-engineio (3.13.1)
python-engineio PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - simplisafe-python 9.2.1 Source cves: CVE-2026-48809 Source advisory: OSV:PYSEC-2026-3033...
simplisafe-python (>=9.0.3, <=9.0.5) potentially affected by CVE-2026-48804 via python-socketio (4.5.0)
python-socketio PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - simplisafe-python =9.0.3, =9.0.5 Source cves: CVE-2026-48804 Source advisory: OSV:GHSA-5W7Q-77MV-V69F...
aioambient (>=1.1.0, <=1.1.1), convo-nlu (0.1.0) +12 more potentially affected by CVE-2026-48804 via python-socketio (4.5.1)
python-socketio PYPI version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient =1.1.0, =2020.1.0b2, =1.10.0a2, =0.1.0, =0.1.0, =0.1.2, =1.0.0, =9.0.6, =9.2.0 Source cves: CVE-2026-48804 Source...
aioambient (>=1.0.3, <=1.0.4), rasa (>=1.8.0, <=1.10.0a1) +1 more potentially affected by CVE-2026-48802 via python-engineio (3.11.2)
python-engineio PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.0.3, =1.8.0, =1.10.0a1 - simplisafe-python 9.0.3 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FH...
aioambient (1.2.0), baseweb (0.0.5) +1 more potentially affected by CVE-2026-48802 via python-engineio (3.13.1)
python-engineio PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - simplisafe-python 9.2.1 Source cves: CVE-2026-48802 Source advisory: OSV:GHSA-CGWC-PV48-FHJ5...
aioambient (>=1.0.3, <=1.0.4), rasa (>=1.8.0, <=1.10.0a1) +1 more potentially affected by CVE-2026-48809 via python-engineio (3.11.2)
python-engineio PYPI version 3.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient =1.0.3, =1.8.0, =1.10.0a1 - simplisafe-python 9.0.3 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GV...
aioambient (1.2.0), baseweb (0.0.5) +1 more potentially affected by CVE-2026-48809 via python-engineio (3.13.1)
python-engineio PYPI version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-engineio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - simplisafe-python 9.2.1 Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...
MAL-2026-6379 Malicious code in simplisafe-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564baff2e47527f159c52c527e1ea2b93d73625f94737f4397cff99311871a18 On npm install, the package's preinstall hook package.json declares "preinstall": "node index.js" executes index.js, which collects the installer's...
EUVD-2018-3436
Malware in sbrugna...