Описание
Malicious Package in my-very-own-package
All versions of my-very-own-package contain malicious code. The package sends the output of process.versions, process.arch and process.platform to a remote server in a postinstall script.
Recommendation
Remove the package from your environment. There are no further signs of compromise.
Пакеты
Наименование
my-very-own-package
npm
Затронутые версииВерсия исправления
>= 0.0.0
Отсутствует
9.8 Critical
CVSS3
Дефекты
CWE-506
9.8 Critical
CVSS3
Дефекты
CWE-506