Skip to content
OpenAdvisories

Package · npm

leetlog

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    Malicious Package in leetlog

    Versions 0.1.2 and 0.1.3 of `leetlog` contain malicious code. The package adds an arbitrary hardcoded SSH key identified as `hacker@evilmachine` to the system's `authorized_keys` ## Recommendation Any computer that has this package installed or running should…