GHSA-gcfc-mgg3-8j2c Malicious Package in sdfjghlkfjdshlkjdhsfg
A malicious npm package acts as a worm, executing arbitrary code and self-replicating across user-owned packages upon installation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is GHSA-gcfc-mgg3-8j2c?
GHSA-gcfc-mgg3-8j2c is a vulnerability in sdfjghlkfjdshlkjdhsfg, published on 3 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
All versions of sdfjghlkfjdshlkjdhsfg contain malicious code. The package is essentially a worm that fetches all packages owned by the user, adds a script to self-replicate as a preinstall script and publishes a new version.
Recommendation
Remove the package from your environment and ensure all packages owned were not impacted.
Which versions are affected by GHSA-gcfc-mgg3-8j2c?
2 open source packages ship an affected version, including sdfjghlkfjdshlkjdhsfg.
| Package | Affected | Fixed in |
|---|---|---|
sdfjghlkfjdshlkjdhsfg npm | From 0.0.0 | None |
sdfjghlkfjdshlkjdhsfg npm | From 0.0.0 | None |
How do I fix GHSA-gcfc-mgg3-8j2c?
No fix has been published for GHSA-gcfc-mgg3-8j2c yet. Limit exposure of the affected software until one is available.
Is GHSA-gcfc-mgg3-8j2c being exploited?
There is no known exploitation of GHSA-gcfc-mgg3-8j2c in the wild and no public exploit code.