github_osv/GHSA-7wgh-5q4q-6wx5
Malicious Package in 1337qq-js
All versions of `1337qq-js` contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes:
- Environment variables
- Running processes
- /etc/hosts
- uname -a
- npmrc file
## Recommendation
Remove the package from your system and rotate any compromised credentials.
gitlab/npm/1337qq-js/GMS-2020-14
Malicious Package
All versions of `1337qq-js` contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes:
- Environment variables
- Running processes
- /etc/hosts
- uname -a
- npmrc file Remove the package from your system and rotate any compromised credentials.