Skip to content
OpenAdvisories

Archive

1 October 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical —

    Malicious code in `loadyaml`

    npm packages `loadyaml` and `electorn` were removed from the npm registry for containing malicious code. Upon installation the package runs a preinstall script that writes a public comment on GitHub containing the following information: - IP and IP-based geol…

  • Critical —

    Malicious code in `electorn`

    npm packages `loadyaml` and `electorn` were removed from the npm registry for containing malicious code. Upon installation the package runs a preinstall script that writes a public comment on GitHub containing the following information: - IP and IP-based geol…