Lucene search
+L

5625 matches found

Github Security Blog
Github Security Blog
•added 2020/09/02 8:18 p.m.•28 views

Malicious Package in exprss

All versions of exprss typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

3.8AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 8:17 p.m.•18 views

GHSA-H5VM-JHQ7-W647 Malicious Package in momen

All versions of momen typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 8:16 p.m.•27 views

Malicious Package in aysnc

All versions of aysnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.7AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 8:16 p.m.•13 views

GHSA-GFJR-XQHM-QVV3 Malicious Package in aysnc

All versions of aysnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:39 p.m.•31 views

Malicious Package in asycn

All versions of asycn typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

4.2AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:38 p.m.•31 views

Malicious Package in asnc

All versions of asnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.8AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 6:37 p.m.•22 views

GHSA-9MJP-GV34-3JCF Malicious Package in aasync

All versions of aasync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2020/09/02 6:36 p.m.•19 views

GHSA-RM7C-X424-G2MW Malicious Package in asyync

All versions of asyync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:36 p.m.•29 views

Malicious Package in asyync

All versions of asyync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

4.1AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:35 p.m.•37 views

Malicious Package in asynnc

All versions of asynnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

4AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:34 p.m.•35 views

Malicious Package in asymc

All versions of asymc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

4.1AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 6:33 p.m.•33 views

GHSA-87QW-7V97-W34R Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:33 p.m.•37 views

Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:31 p.m.•42 views

Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

4AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 6:31 p.m.•27 views

GHSA-RGGQ-F2WF-M6CP Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:30 p.m.•35 views

Malicious Package in 4equest

All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

3.9AI score
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2020/09/02 6:30 p.m.•27 views

GHSA-P33Q-W45H-2HCJ Malicious Package in 4equest

All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•3 views

PT-2020-21323

Name of the Vulnerable Software and Affected Versions asycn affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads information to a remote server,...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•2 views

PT-2020-21023

Name of the Vulnerable Software and Affected Versions erquest versions affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. It uploads various information to a...

9.8CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/02 12:00 a.m.•4 views

PT-2020-21513

Name of the Vulnerable Software and Affected Versions asnyc affected versions not specified Description The issue concerns a typosquatted package that tracks users who have installed it by mistake, thinking it was a similarly named popular package. Upon installation, the package uploads certain...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder