Sandworm scans all new Npm package versions for malicious install scripts.
Scanning since October 2024.
Follow our π / Twitter feed for updates.
@oppo-minigame/cli:
Detected: 2 Apr 2025
Detected Date: 2 Apr 2025
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
The script attempts to access Windows Registry Editor (regedit), which could potentially allow unauthorized changes to system settings, leading to broader vulnerabilities or exploits on the local machine.
Install script:
quickgame regeditDetected: 9 Jan 2025
Detected Date: 9 Jan 2025
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
This script likely interacts with the Windows Registry, which can modify system settings and configurations. Unauthorized changes to the registry can lead to malware installation, data theft, or system compromise.
Install script:quickgame regeditDetected: 18 Dec 2024
Detected Date: 18 Dec 2024
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
The script likely attempts to manipulate the Windows Registry using the "regedit" command, which can be used for harmful purposes such as altering system configurations or installing persistent malware.
Install script:quickgame regeditDetected: 9 Dec 2024
Detected Date: 9 Dec 2024
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
The script appears to manipulate the Windows registry through "regedit," which can be used to alter system configurations, potentially allowing for unauthorized access or malicious changes to system settings.
Install script:quickgame regeditDetected: 6 Dec 2024
Detected Date: 6 Dec 2024
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
This script likely attempts to modify the Windows registry, which could lead to unauthorized changes to the system configuration or even allow malicious actors to gain control over system settings.
Install script:quickgame regeditDetected: 5 Dec 2024
Detected Date: 5 Dec 2024
Affected Install Script: postinstall
Package Source: βοΈ View on Npm
This script attempts to manipulate the Windows registry using regedit, which can be exploited to alter system settings, compromise security features, and potentially install malware or steal information.
quickgame regedit
