Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20905
HistoryJul 26, 2019 - 10:40 a.m.

Malicious Package

2019-07-2610:40:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.009 Low

EPSS

Percentile

83.0%

simple_captcha2 is a malicious package. The package contains a backdoor similar to the bootstrap-sass malware, as seen in simple_captcha2-0.2.3/lib/simple_captcha/middleware.rb.

CPENameOperatorVersion
simple_captcha2eq0.2.3

0.009 Low

EPSS

Percentile

83.0%