Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2020/09/02 9:15 p.m.•26 views

GHSA-PJ97-J597-PPM7 Malicious Package in rqeuest

All versions of rqeuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2020/09/02 8:32 p.m.•25 views

GHSA-WC7Q-QPM4-8PQV Malicious Package in rrequest

All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

9.8CVSS6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•6 views

PT-2020-21513

Name of the Vulnerable Software and Affected Versions asnyc affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. Upon installation, the package uploads certain...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•4 views

PT-2020-21327

Name of the Vulnerable Software and Affected Versions requet affected versions not specified Description The requet package is a typosquatted version of a popular package with a similar name, designed to track users who install the incorrect package. Upon installation, it uploads information to a...

9.8CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•4 views

PT-2020-21323

Name of the Vulnerable Software and Affected Versions asycn affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads information to a remote server,...

9.8CVSS5.8AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/05/06 2:18 p.m.•30 views

Malicious Package

Overview All versions of reuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder