GHSA-m36m-x4c5-rjxj
Silently Runs Cryptocoin Miner in hooka-tools
GHSA-m36m-x4c5-rjxj is a vulnerability with no CVSS score yet in hooka-tools, published September 1, 2020. No source lists public exploit code. No source names a fixed version.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background.
All affected versions have been unpublished from the npm registry.
Recommendation
While this module has been unpublished, some versions may exist in mirrors or caches. Do not install this module, and remove it if found.
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hooka-toolsnpm | 0.0.0 and later | None known |
What each source reports
GitHub AdvisoriesNo score
Silently Runs Cryptocoin Miner in hooka-tools
Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background.
All affected versions have been unpublished from the npm registry.
Recommendation
While this module has been unpublished, some versions may exist in mirrors or caches. Do not install this module, and remove it if found.
- Record
GHSA-m36m-x4c5-rjxj- Updated
- 2026-11-02
OSVNo score
Silently Runs Cryptocoin Miner in hooka-tools
Affected versions of hooka-tools were compromised and modified to silently run a cryptocoin miner in the background.
All affected versions have been unpublished from the npm registry.
Recommendation
While this module has been unpublished, some versions may exist in mirrors or caches. Do not install this module, and remove it if found.
- Record
GHSA-m36m-x4c5-rjxj- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.