Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3Z2gtNXE0cS02d3g1

Malicious Package in 1337qq-js

All versions of 1337qq-js contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes:

• Environment variables
• Running processes
• /etc/hosts
• uname -a
• npmrc file

Recommendation

Remove the package from your system and rotate any compromised credentials.

Permalink: https://github.com/advisories/GHSA-7wgh-5q4q-6wx5
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3Z2gtNXE0cS02d3g1
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 4 years ago
Updated: almost 2 years ago

Identifiers: GHSA-7wgh-5q4q-6wx5
References:

• https://www.npmjs.com/advisories/1455
• https://github.com/advisories/GHSA-7wgh-5q4q-6wx5

Blast Radius: 1.0

Affected Packages