18 matches found
Malicious Package
Overview zeal-util-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview zeal-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
MAL-2026-16542 Malicious code in zeal-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...
MAL-2026-16541 Malicious code in zeal-util-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ed95500d2f1c637bcf47151a9220c0a81ee6cbd7a7aa4a8f66c74fed6e341 postinstall.js and index.js load canary.js, which POSTs a JSON payload to https://npm-canary.aveliscare.com/beacon at install time and on require. Th...
Malicious code in zeal-util-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ed95500d2f1c637bcf47151a9220c0a81ee6cbd7a7aa4a8f66c74fed6e341 postinstall.js and index.js load canary.js, which POSTs a JSON payload to https://npm-canary.aveliscare.com/beacon at install time and on require. Th...
Malicious code in zeal-rq-hooks (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf7e926ec85f72f362263a19d4f99c4b215ddd94ed4454c669c3387cacee164 The package includes canary.js which imports os/http/https and, at line 123, POSTs a JSON body containing os.hostname, os.userInfo, process.platform,...
Malicious Package
Overview zeal-rq-hooks is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
[SECURITY] Fedora 44 Update: zeal-0.8.0-2.fc44
Zeal is a simple offline documentation browser inspired by Dash...
[SECURITY] Fedora 42 Update: zeal-0.7.2-14.fc42
Zeal is a simple offline documentation browser inspired by Dash...
[SECURITY] Fedora 42 Update: zeal-0.7.2-9.fc42
Zeal is a simple offline documentation browser inspired by Dash...
MAL-2025-4525 Malicious code in zeal-plugins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52d172cdcd738359992982c891dc3da3b7c4403d5cb3cb4fc4eb1650113d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zeal-plugins (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52d172cdcd738359992982c891dc3da3b7c4403d5cb3cb4fc4eb1650113d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in zeal-plugins
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Fedora: Security Advisory (FEDORA-2024-bfb8617ba3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: zeal-0.7.0-10.fc40
Zeal is a simple offline documentation browser inspired by Dash...
zeal-corp.com Cross Site Scripting vulnerability OBB-3057485
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
zeal-rent.jp Cross Site Scripting vulnerability OBB-1356230
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...