Skip to content
OpenAdvisories
Medium · 5.3 CVE-2017-16126 EUVD-2020-0749GHSA-4r5x-qjqc-p579

Tracking Module in botbait

Published Jun 7, 2018 · Updated Aug 5, 2024 · Assigned by hackerone

Description

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install)

Affected packages

EcosystemPackageAffectedFixedRecord
npm botbait >= 0.0.0 — GHSA-4r5x-qjqc-p579

References