| Description: | Summary:
Detection and reporting of known malicious JavaScript packages
or package versions.
Vulnerability Impact:
The packages mostly extract information from environment
variables, while some create a remote shell or a command-and-control infrastructure, completely
comprising the target host.
Affected Software/OS:
The following packages are affected:
- npm-script-demo
- pandora-doomsday
- botbait
- d3.js
- jquery.js
- mariadb
- mysqljs
- node-sqlite
- nodesqlite
- sqlite.js
- sqliter
- node-fabric
- fabric-js
- nodefabric
- sqlserver
- mssql.js
- nodemssql
- gruntcli
- mssql-node
- babelcli
- tkinter
- node-tkinter
- node-opensl
- node-openssl
- openssl.js
- opencv.js
- node-opencv
- ffmepg
- nodeffmpeg
- nodecaffe
- nodemailer-js
- nodemailer.js
- noderequest
- crossenv
- http-proxy.js
- proxy.js
- mongose
- shadowsock
- smb
- nodesass
- cross-env.js
- cofee-script, cofeescript, coffescript, coffe-script
- jquey
- discordi.js
- hooka-tools
- getcookies
- nothing-js
- ladder-text-js
- boogeyman
- flatmap-stream included in event-stream version 3.3.6
- jdb.js
- db-json.js
- an0n-chat-lib
- angluar-cli
- discord-fix
- epress
- commmander, commqnder, commander-js
- blubird
- eslint-config-airbnb-standard version 2.0.0, published with a bundled version of eslint-scope that was found to contain malicious code
- eslint-config-eslint version 5.0.2
- eslint-scope version 3.7.2
- rc versions 1.2.9, 1.3.9 and 2.3.9
- coa versions 2.0.3, 2.0.4, 2.1.1, 2.1.3, 3.0.1 and 3.1.3
- ua-parser-js versions 0.7.29, 0.8.0 and 1.0.0
- malicious-npm-package
- sonatype
- load-from-cwd-or-npm version 3.0.2
- smartsearchwp
- portionfatty12
- rrgod
- soket.io, soket.js, foever
- npm-script-demo
- regenraotr, regenrator
- axois
Solution:
- Delete the package
- Clear your npm cache
- Ensure it is not present in any other package.json files on your system
- Regenerate your registry credentials, tokens, and any other sensitive credentials that may have
been present in your environment variables.
CVSS Score:
10.0
CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
