Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
hooka-tools Runs Malicious Cryptocoin Miner in Background
published 6 years ago
Summary
The hooka-tools software has been modified to secretly run a cryptocoin miner, which can slow down your computer and waste its resources. This is not a problem with your computer, but rather with the software that's been compromised. Do not install hooka-tools, and if you already have it, remove it.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | ehsalazar | hooka-tools | >= 0.0.0 |
Original advisory text
Silently Runs Cryptocoin Miner in hooka-tools
Affected versions of `hooka-tools` were compromised and modified to silently run a cryptocoin miner in the background.
All affected versions have been unpublished from the npm registry.
## Recommendation
While this module has been unpublished, some versions may exist in mirrors or caches. Do not install this module, and remove it if found.
All affected versions have been unpublished from the npm registry.
## Recommendation
While this module has been unpublished, some versions may exist in mirrors or caches. Do not install this module, and remove it if found.
Timeline
Published1 Sep 2020
Updated6 Mar 2026
First seen6 Mar 2026
Sources
GHSA-m36m-x4c5-rjxj · GHSA
Track software like this
Free during beta