MAL-2025-17123 Malicious code in client-connector-socket.io (npm)

The package client-connector-socket.io was found to contain malicious code...

MAL-2025-33598 Malicious code in socketio-equinox-thuban-superflare (npm)

The package socketio-equinox-thuban-superflare was found to contain malicious code...

Malicious code in crust-socketio-prettier-stylelint-registry (npm)

The package crust-socketio-prettier-stylelint-registry was found to contain malicious code...

MAL-2025-33597 Malicious code in socketio-await-volcanology-bellatrix (npm)

The package socketio-await-volcanology-bellatrix was found to contain malicious code...

Malicious code in umbriel-hermes-socketio-sqlite (npm)

The package umbriel-hermes-socketio-sqlite was found to contain malicious code...

Malicious code in technocracy-dependencies-socketio-hawkingradiation (npm)

The package technocracy-dependencies-socketio-hawkingradiation was found to contain malicious code...

Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4943 Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in web3-socketio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

Striker - A Command And Control (C2)

Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent should you...

Socketio Engine.IO Denial of Service Vulnerability

Engine.IO is a transport-based implementation of Socket.IO's cross-browser/cross-device bi-directional communication layer.A denial-of-service vulnerability exists in versions of Socketio Engine.IO prior to 3.6.1, 4.0.0 and later, and prior to 6.2.1, which stems from a failure to properly handle...

Socketio Socket.io Access Control Error Vulnerability

Socketio Socket.io is a Javascript-based server-side application from the Socketio community that supports event-based bidirectional communication. A security vulnerability exists in socket.io before 2.4.0, which stems from a CORS misconfiguration and is prone to insecure default values...

Socketio Engineio Resource Management Error Vulnerability

Socketio Engineio is a Javascript-based real-time engine for bi-directional communication between browsers and devices from the Socketio community. A security vulnerability exists in socketio socket.io-parser before 3.4.1, which can be exploited by attackers to cause a denial of service memory...

Downloads Resources over HTTP in roslib-socketio

Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

GHSA-XQ8R-R72R-PQWM Downloads Resources over HTTP in roslib-socketio

Affected versions of roslib-socketio insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

Design/Logic Flaw

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...

CVE-2020-24928

managers/socketManager.ts in PreMiD through 2.1.3 has a locally hosted socketio web server port 3020 open to all origins, which allows attackers to obtain sensitive Discord user information...