MAL-2025-18674 Malicious code in dotenv-socketio-ichnology-higgs (npm)

The package dotenv-socketio-ichnology-higgs was found to contain malicious code...

MAL-2025-4943 Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in web3-socketio

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in web3-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2131391b300bee27a2d4e470c16bf37492276c2e92a4895a34f5933d5d0602b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.corundumstudio.socketio:netty-socketio (>=1.6.2, <=1.6.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.0.1)

org.redisson:redisson MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.2, =1.6.3 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.6.4, <=1.6.6) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.0.2)

org.redisson:redisson MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.4, =1.6.6 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.7.0, <=1.7.3) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.1)

org.redisson:redisson MAVEN version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.0, =1.7.3 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (>=1.7.4, <=1.7.8) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.1.5)

org.redisson:redisson MAVEN version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.4, =1.7.8 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (1.6.7) potentially affected by CVE-2023-42809 via org.redisson:redisson (1.2.0)

org.redisson:redisson MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.6.7 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8RV...

com.corundumstudio.socketio:netty-socketio (>=1.7.9, <=1.7.10), com.geccocrawler:gecco-redis (>=1.0.0, <=1.0.5) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.5)

org.redisson:redisson MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.9, =1.0.0, =1.0.5 Source cves: CVE-2023-42809 Source advisory:...

com.corundumstudio.socketio:netty-socketio (1.7.11) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.2.17)

org.redisson:redisson MAVEN version 2.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.11 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8...

com.corundumstudio.socketio:netty-socketio (1.7.12) potentially affected by CVE-2023-42809 via org.redisson:redisson (2.4.0)

org.redisson:redisson MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.12 Source cves: CVE-2023-42809 Source advisory: OSV:GHSA-4HVC-QWR2-F8R...

com.corundumstudio.socketio:netty-socketio (1.7.13), org.redisson:redisson-tomcat (2.10.3) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.10.3)

org.redisson:redisson MAVEN version 2.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio 1.7.13 - org.redisson:redisson-tomcat 2.10.3 -...

com.corundumstudio.socketio:netty-socketio (>=1.7.15, <=1.7.16), org.redisson:redisson-tomcat (2.12.0) +3 more potentially affected by CVE-2023-42809 via org.redisson:redisson (2.12.0)

org.redisson:redisson MAVEN version 2.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.redisson:redisson and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.15, =1.7.16 - org.redisson:redisson-tomcat 2.12.0 -...

com.corundumstudio.socketio:netty-socketio (>=1.7.10, <=1.7.18), com.hazelcast:hazelcast-build-utils (3.4.3) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.4.3)

com.hazelcast:hazelcast MAVEN version 3.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.7.10, =1.7.18 - com.hazelcast:hazelcast-build-utils 3.4.3 -...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: OSV:GHSA-HHR9-RH25-HVF9...

@xr3ngine/client-core (>=0.2.15, <=0.2.18), @xr3ngine/client-ml (>=0.2.15, <=0.2.18) +1 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=4.5.9, <=4.5.11)

@feathersjs/socketio NPM version =4.5.9, =0.2.15, =0.2.15, =0.2.18 - @xr3ngine/server-core 0.2.14 Source cves: CVE-2023-37899 Source advisory: GHSA-HHR9-RH25-HVF9...

com.corundumstudio.socketio:netty-socketio (>=1.6.0, <=1.7.9), com.hazelcast:hazelcast-client (3.1.3) +8 more potentially affected by CVE-2023-33265 via com.hazelcast:hazelcast (3.1.3)

com.hazelcast:hazelcast MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.corundumstudio.socketio:netty-socketio =1.6.0, =1.7.9 - com.hazelcast:hazelcast-client 3.1.3 -...

@acter/gateway (>=0.6.0, <=0.7.8), @acter/sentinel (0.5.2) +43 more potentially affected by CVE-2023-37899 via @feathersjs/socketio (>=3.2.7, <=4.5.11)

@feathersjs/socketio NPM version =3.2.7, =0.6.0, =0.12.0, =1.0.1, =0.1.2, =0.1.2, =1.0.0, =1.0.2, =1.0.1, =0.1.5, =0.1.8 and more Source cves: CVE-2023-37899 Source advisory: MEND:CVE-2023-37899...

Striker - A Command And Control (C2)

Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent should you...