Skip to content
OpenAdvisories

Package · npm

font-scrubber

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-65j7-66p7-9xgf

    Malicious Package in font-scrubber

    Version 1.2.2 of `font-scrubber` contains malicious code as a postinstall script. The package attempts to upload sensitive files from the system to a remote server. The files include configuration files, command history logs, SSH keys and /etc/passwd. ## Reco…

    font-scrubber npm