Silently Runs Cryptocoin Miner

Module: hooka-tools

Published: October 25th, 2017

Reported by:

CVE-NONE

CWE-506

Vulnerable: All
Patched: None

Overview

The hooka-tools module was updated to silently run a cryptocoin miner in the background.

Remediation

Do not install / use this module. It has been unpublished from the registry but may exist in some caches.

Sign up FREE for
nsp Continuous Security

Free for open source and the first private repo,
then just $1/mo per private repo