Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThocTItZmNxbS0zOWhx

Malicious Package in rimrafall

Version 1.0.0 of rimrafall contains malicious code as a preinstall script. The package attempts to remove all files in the system's root folder.

Recommendation

If you installed this package it is likely your machine was erased. If not, remove the package from your system and verify if any files were deleted.

Permalink: https://github.com/advisories/GHSA-8hq2-fcqm-39hq
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThocTItZmNxbS0zOWhx
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 3 years ago
Updated: over 1 year ago

CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-8hq2-fcqm-39hq
References:

• https://www.npmjs.com/advisories/913
• https://github.com/advisories/GHSA-8hq2-fcqm-39hq

Blast Radius: 5.9

Affected Packages