Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2020/09/03 5:44 p.m.•21 views

Malicious Package in qingting

All versions of qingting contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

3.3AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/03 5:41 p.m.•27 views

Malicious Package in midway-xtpl

All versions of midway-xtpl contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

3.6AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•2 views

PT-2020-21542

Name of the Vulnerable Software and Affected Versions midway-xtpl versions affected versions not specified Description The issue concerns malicious code in the midway-xtpl package, which uploads system information to a remote server, downloads a file, and executes it. Any computer with this packa...

9.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/03 12:00 a.m.•2 views

PT-2020-21566

Name of the Vulnerable Software and Affected Versions Package affected versions not specified Description The package contains malicious code that uploads system information, including the operating system and hostname, to a remote server. There are no indications of further compromise...

9.8CVSS5.9AI score
SaveExploits0References2
nodejs
nodejs
•added 2019/08/30 7:55 p.m.•25 views

Malicious Package

Overview This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise. References GitHub Advisory...

6.7AI score
SaveExploits0Affected Software1
Veracode
Veracode
•added 2019/07/15 2:51 a.m.•18 views

Malicious Package

antd-cloud is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

6.5AI score
SaveExploits0
Veracode
Veracode
•added 2019/07/15 2:51 a.m.•12 views

Malicious Package

ali-contributors is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

6.5AI score
SaveExploits0
Rows per page
Query Builder