Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-7wgh-5q4q-6wx5

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7wgh-5q4q-6wx5

Malicious Package in 1337qq-js All versions of `1337qq-js` contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes: - Environment variables - Running processes - /etc/hosts - uname -a - npmrc file ## Recommendation Remove the package from your system and rotate any compromised credentials.

gitlab/npm/1337qq-js/GMS-2020-14

Malicious Package All versions of `1337qq-js` contain malicious code. The package exfiltrates sensitive information through install scripts. It targets UNIX systems. The information exfiltrated includes: - Environment variables - Running processes - /etc/hosts - uname -a - npmrc file Remove the package from your system and rotate any compromised credentials.