Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-wxrm-2h86-v95f

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wxrm-2h86-v95f

Malicious Package in pizza-pasta Version 1.0.3 of `pizza-pasta` contains malicious code as a install scripts. The package created folders in the system's Desktop and downloaded an image from `imgur.com`. The package also printed the users SSH keys to the console. ## Recommendation Remove the package from your environment. There are no evidences of further compromise.

gitlab/npm/pizza-pasta/GMS-2020-432

Malicious Package of `pizza-pasta` contains malicious code as a install scripts. The package created folders in the system's Desktop and downloaded an image from `imgur.com`. The package also printed the users SSH keys to the console. Remove the package from your environment. There are no evidences of further compromise.