Описание
The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.
Ссылки
- Third Party Advisory
- Product
- Third Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lodahs_project:lodahs:1.0.0:*:*:*:*:node.js:*:*
EPSS
Процентиль: 63%
0.00443
Низкий
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
EPSS
Процентиль: 63%
0.00443
Низкий
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
NVD-CWE-noinfo