EUVD-2025-49647

Malicious code in patientsquirrelz3n npm...

EUVD-2025-50024

Malicious code in imperialsquirrelz3n npm...

MAL-2025-61022 Malicious code in patient_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ca4a4ec52a10fb3e9e35a45d662923e67800569c920b337253cbe368e48e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50698

Malicious code in appallingsquirrelz3n npm...

EUVD-2025-50527

Malicious code in conceptualsquirrelz3n npm...

EUVD-2025-45348

Malicious code in scientificsquirrelz3n npm...

EUVD-2025-46060

Malicious code in occupationalsquirrelz3n npm...

EUVD-2021-28574

Malicious code in bioql PyPI...

EUVD-2022-52243

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-41556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a victim...

TencentOS Server 4: squirrel (TSSA-2025:0032)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0032 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

OPENSUSE-SU-2024:12611-1 squirrel-3.2-1.1 on GA media

These are all security issues fixed in the squirrel-3.2-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE: Security Advisory for squirrel (openSUSE-SU-2023:0080-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Coyote: A Sophisticated Banking Trojan Targeting Financial Information

Summary: A new banking trojan called Coyote is currently targeting more than 60 banking institutions, primarily in Brazil. The malware distributes itself using the Squirrel installer and executes its infection process using Node.js and Nim, a relatively new multi-platform programming language...

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Sixty-one banking institutions, all of them originating from Brazil, are the target of a new banking trojan called Coyote. "This malware utilizes the Squirrel installer for distribution, leveraging Node.js and a relatively new multi-platform programming language called Nim as a loader to complete...

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, we encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught our...

Updated squirrel/supertux packages fix security vulnerability

sqclass.cpp in Squirrel 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script sandbox even if all dangerous functionality such as Fi...

MGASA-2023-0150 Updated squirrel/supertux packages fix security vulnerability

sqclass.cpp in Squirrel 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script sandbox even if all dangerous functionality such as Fi...

Mageia: Security Advisory (MGASA-2023-0150)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : squirrel (openSUSE-SU-2023:0080-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0080-1 advisory. - sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read in the core interpreter that can lead to Code Execution. If a...