Yarn 安全漏洞

Yarn is an open source package installation, management tool. A security vulnerability exists in Yarn 1.22.22 and earlier versions, which stems from a function explodeHostedGitFragment that causes regular expressions to be less complex...

Malicious code in yarn-test-git-repo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc9cafea25a24afd9f19a9a4ba2af18e06bd436e07baa0c8cb4250ab522228c Any computer that has this package installed or running should be considered...

MAL-2025-6137 Malicious code in yarn-test-git-repo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc9cafea25a24afd9f19a9a4ba2af18e06bd436e07baa0c8cb4250ab522228c Any computer that has this package installed or running should be considered...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-7.fc41

Fast, reliable, and secure dependency management...

Exploit for CVE-2025-29927

Introduction By manipulating the x-middleware-subrequest req...

Linux Distros Unpatched Vulnerability : CVE-2021-4435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious...

Malicious code in example-yarn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-655 Malicious code in example-yarn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Cybersecurity researchers have discovered a new botnet malware family called Gorilla aka GorillaBot that draws its inspiration from the leaked Mirai botnet source code. Cybersecurity firm NSFOCUS, which identified the activity last month, said the botnet "issued over 300,000 attack commands, with...

MGASA-2024-0282 Updated nodejs & yarnpkg packages fix security vulnerabilities

Nodejs 22 is the new active LTS branch and 5 CVE are fixed. CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 High CVE-2024-22020 - Bypass network import restriction via data URL Medium CVE-2024-22018 - fs.lstat bypasses permission model Low CVE-2024-36137 - fs.fchown/fchmod bypasses...

Photon OS 3.0: Yarn PHSA-2024-3.0-0723

An update of the yarn package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0723. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Yarn PHSA-2020-2.0-0216

An update of the yarn package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0216. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware...

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

Cybersecurity researchers have uncovered a new malware campaign that targets publicly exposed Docket API endpoints with the aim of delivering cryptocurrency miners and other payloads. Included among the tools deployed is a remote access tool that's capable of downloading and executing more...

Misconfigured Servers Targeted with New Golang Malwares

Summary: In a newly observed malware campaign, threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services. The campaign aims to deliver a cryptocurrency miner and establish a reverse shell for persistent remote...

Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Threat actors are targeting misconfigured and vulnerable servers running Apache Hadoop YARN, Docker, Atlassian Confluence, and Redis services as part of an emerging malware campaign designed to deliver a cryptocurrency miner and spawn a reverse shell for persistent remote access. "The attackers...

New Linux Malware Alert: ‘Spinning YARN’ Hits Docker, Other Key Apps

By Deeba Ahmed Another day, another Linux malware! This is a post from HackRead.com Read the original post: New Linux Malware Alert: Spinning YARN Hits Docker, Other Key Apps...

Important Photon OS Security Update - PHSA-2024-3.0-0723

Updates of 'linux-esx', 'linux-aws', 'linux-secure', 'linux', 'linux-rt', 'yarn' packages of Photon OS have been released...

Untrusted Search Path

Yarn is vulnerable to Untrusted Search Path. The vulnerability is caused due to improper validation before constructing a file path within the validate method in child.js .This could allow an attacker to execute malicious commands in unexpected ways if the attacker tricks a user into executing...

7ghost-cli (>=1.17.6-next.0 <=1.18.4), @adaptable/client (>=0.0.9 <=1.26.0) +157 more potentially affected by CVE-2021-4435 via yarn (>=0.15.1 <=1.22.11)

yarn NPM version =0.15.1, =1.17.6-next.0, =0.0.9, =0.0.1, =1.6.0, =0.3.0, =0.3.0, =0.3.0, =0.4.0-next.7, =0.3.0, =0.3.0, =1.1.0, =5.6.4, =3.1.264, =3.4.0-dev.1 - @cessair/building =1.0.0 and more Source cves: CVE-2021-4435 Source advisory: OSV:GHSA-MPWJ-FCR6-X34C...