Skip to content
OpenAdvisories

Package · npm

colro-name

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-jp9g-5x75-ccp8

    Malicious Package in colro-name

    Version 9.0.0 of `colro-name` contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. ## Recommendation Any computer that has this package installed or running should be considere…

    colro-name npm