Skip to content
OpenAdvisories

Package · npm

colour-string

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    GHSA-8mmf-qp7j-2w24

    Malicious Package in colour-string

    Version 1.5.3 of `colour-string` contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. ## Recommendation Any computer that has this package installed or running should be consid…

    colour-string npm