GHSA-vv52-3mrp-455m Malicious Package in m-backdoor
The m-backdoor npm package contains malicious code that executes remote scripts, allowing attackers to modify website content and execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is GHSA-vv52-3mrp-455m?
GHSA-vv52-3mrp-455m is a vulnerability in m-backdoor, published on 3 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
All versions of m-backdoor contain malicious code. The package downloads a file from a remote server and executes it as a preinstall script. At the time of the release of this advisory the downloaded file only defaces websites by removing elements randomly from the DOM.
Recommendation
Remove the package from your system.
Which versions are affected by GHSA-vv52-3mrp-455m?
2 open source packages ship an affected version, including m-backdoor.
| Package | Affected | Fixed in |
|---|---|---|
m-backdoor npm | From 0.0.0 | None |
m-backdoor npm | From 0.0.0 | None |
How do I fix GHSA-vv52-3mrp-455m?
No fix has been published for GHSA-vv52-3mrp-455m yet. Limit exposure of the affected software until one is available.
Is GHSA-vv52-3mrp-455m being exploited?
There is no known exploitation of GHSA-vv52-3mrp-455m in the wild and no public exploit code.