GitHub Advisoryadvisory · npm

GHSA-7wgh-5q4q-6wx5 Malicious Package in 1337qq-js

CRITICAL Published 2020-09-04 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
1337qq-js
Severity
Critical
Weaknesses
CWE-506
Reviewed
2020-08-31

Affected packages

• npm 1337qq-js: >= 0.0.0 (no fix yet)

Description

All versions of `1337qq-js` contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes: • Environment variables • Running processes • /etc/hosts • uname -a • npmrc file Recommendation Remove the package from your system and rotate any compromised credentials.

Related

Weakness · CWE (1)

  • CWE-506 Embedded Malicious Code weakness

References