Описание
Malicious Package in rate-map
Version 1.0.3 of rate-map contains malicious code. The malware breaks functionality of the purescript-installer package by rewriting code of the dl-tar dependency.
Recommendation
Upgrade to version 1.0.5 or later. There is no indication of further compromise.
Пакеты
Наименование
rate-map
npm
Затронутые версииВерсия исправления
= 1.0.3
1.0.5
9.8 Critical
CVSS3
Дефекты
CWE-506
9.8 Critical
CVSS3
Дефекты
CWE-506