Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2020/09/03 5:44 p.m.15 views

Malicious Package in qingting

All versions of qingting contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer...

3.3AI score
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/03 5:41 p.m.17 views

Malicious Package in midway-xtpl

All versions of midway-xtpl contain malicious code. The package uploads system information to a remote server, downloads a file and executes it. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

3.6AI score
Exploits0References2Affected Software1
Node.js
Node.js
added 2019/08/30 7:55 p.m.16 views

Malicious Package

Overview This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise. References GitHub Advisory...

6.7AI score
Exploits0Affected Software1
Veracode
Veracode
added 2019/07/15 2:51 a.m.6 views

Malicious Package

ali-contributors is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

6.5AI score
Exploits0
Veracode
Veracode
added 2019/07/15 2:51 a.m.12 views

Malicious Package

antd-cloud is a malicious package. The package uploads system information to a remote server, downloads a file and executes it...

6.5AI score
Exploits0
Rows per page
Query Builder