Skip to content
OpenAdvisories

Package · npm

boogeyman

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-9hc2-w9gg-q6jw

    Malicious Package in boogeyman

    All versions of `boogeyman` are considered malicious. This particular package would download a payload from pastebin.com, eval it to read ssh keys and the users `.npmrc` and send them to a private pastebin account. ## Recommendation This package was published…

    boogeyman npm