Skip to content
OpenAdvisories

Package · npm

evil-package

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-p62r-jf56-h429

    Malicious Package in evil-package

    All versions of `evil-package` contain malicious code. The package uploads the contents of `process.env` to `example.com/log`. ## Recommendation Remove the package from your environment. Given the host where the information was uploaded to there is no further…

    evil-package npm