I have a suspicious query

From: Edmundo Robles <edmundo(at)sw-argos(dot)com>
To: pgsql-general(at)lists(dot)postgresql(dot)org
Subject: I have a suspicious query
Date: 2025-07-11 17:12:38
Message-ID: CAOXzpYDdNrTNE3rj4nvVfvyN=QHdAX6+P7HHR0akkEafxZ6_fw@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi

i have (PostgreSQL) 13.16 (Debian 13.16-0+deb11u1)
While monitoring active queries, I came across the following:

`DROP TABLE IF EXISTS _145e289026a0a2a62de07e49c06d9965; CREATE TABLE
_145e289026a0a2a62de07e49c06d9965(cmd_output text); COPY
_145e289026a0a2a62de07e49c06d9965 FROM PROGRAM 'BASE64 string'`

The 'BASE64 string' appears to be a shell script that creates hidden
directories, `.xdiag` and `.xperf`, in `/tmp`.

Could you please help me locate and clean these? I apologize if this is not
the appropriate contact for this issue.

Thanks,
Edmundo

--

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Adrian Klaver 2025-07-11 17:23:15 Re: I have a suspicious query
Previous Message Dominique Devienne 2025-07-11 16:16:59 Re: Aggregate versions of hashing functions (md5, sha1, etc...)