Skip to content
OpenAdvisories

Package · npm

bignum

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical —

    Malware in pre-build binaries of bignum

    ### Impact bignum releases from v0.12.2 to v0.13.0 (inclusive) used node-pre-gyp to optionally download pre-built binary versions of the addon. These binaries were published on a now-expired S3 bucket which has since been claimed by a malicious third party wh…