271 matches found
MAL-2025-16853 Malicious code in charon-blitz-socketio-nightwatch (npm)
The package charon-blitz-socketio-nightwatch was found to contain malicious code...
MAL-2025-17727 Malicious code in crust-socketio-prettier-stylelint-registry (npm)
The package crust-socketio-prettier-stylelint-registry was found to contain malicious code...
MAL-2025-24093 Malicious code in juno-seismology-socketio-electron (npm)
The package juno-seismology-socketio-electron was found to contain malicious code...
Malicious code in juno-seismology-socketio-electron (npm)
The package juno-seismology-socketio-electron was found to contain malicious code...
MAL-2025-34224 Malicious code in supervisor-draco-socketio-hapi (npm)
The package supervisor-draco-socketio-hapi was found to contain malicious code...
MAL-2025-34631 Malicious code in technocracy-dependencies-socketio-hawkingradiation (npm)
The package technocracy-dependencies-socketio-hawkingradiation was found to contain malicious code...
Malicious code in charon-blitz-socketio-nightwatch (npm)
The package charon-blitz-socketio-nightwatch was found to contain malicious code...
Malicious code in magellan-halley-socketio-uninstall (npm)
The package magellan-halley-socketio-uninstall was found to contain malicious code...
Malicious code in resonance-socketio-pulsar-meteor (npm)
The package resonance-socketio-pulsar-meteor was found to contain malicious code...
Malicious code in dotenv-socketio-ichnology-higgs (npm)
The package dotenv-socketio-ichnology-higgs was found to contain malicious code...
MAL-2025-4943 Malicious code in web3-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in web3-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Striker - A Command And Control (C2)
Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent should you...
Socketio Engine.IO Denial of Service Vulnerability
Engine.IO is a transport-based implementation of Socket.IO's cross-browser/cross-device bi-directional communication layer.A denial-of-service vulnerability exists in versions of Socketio Engine.IO prior to 3.6.1, 4.0.0 and later, and prior to 6.2.1, which stems from a failure to properly handle...
Socketio Socket.io Access Control Error Vulnerability
Socketio Socket.io is a Javascript-based server-side application from the Socketio community that supports event-based bidirectional communication. A security vulnerability exists in socket.io before 2.4.0, which stems from a CORS misconfiguration and is prone to insecure default values...
Socketio Engineio Resource Management Error Vulnerability
Socketio Engineio is a Javascript-based real-time engine for bi-directional communication between browsers and devices from the Socketio community. A security vulnerability exists in socketio socket.io-parser before 3.4.1, which can be exploited by attackers to cause a denial of service memory...
Downloads Resources over HTTP in roslib-socketio
Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
GHSA-XQ8R-R72R-PQWM Downloads Resources over HTTP in roslib-socketio
Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...
