GHSA-3cjv-4phw-gvvv Malicious Package in getcookies
A backdoor in the getcookies npm package allows remote attackers to execute arbitrary commands on affected systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is GHSA-3cjv-4phw-gvvv?
GHSA-3cjv-4phw-gvvv is a vulnerability in getcookies, published on 1 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The getcookies module contained a backdoor that would allow for a remote attacker to execute arbitrary commands on the system running the malicious module.
Recommendation
This module should be uninstalled if found used within an application. In addition to removing the installed module, you will also want to evaluate your application to determine whether or not user data or systems were compromised.
Which versions are affected by GHSA-3cjv-4phw-gvvv?
2 open source packages ship an affected version, including getcookies.
| Package | Affected | Fixed in |
|---|---|---|
getcookies npm | All versions | None |
getcookies npm | All versions | None |
How do I fix GHSA-3cjv-4phw-gvvv?
No fix has been published for GHSA-3cjv-4phw-gvvv yet. Limit exposure of the affected software until one is available.
Is GHSA-3cjv-4phw-gvvv being exploited?
There is no known exploitation of GHSA-3cjv-4phw-gvvv in the wild and no public exploit code.