Skip to content
OpenAdvisories
Critical · 9.8 GHSA-69mf-2cw2-38m8

Malicious Package in js-shc3

Published Sep 3, 2020 · Updated Sep 30, 2021 · Assigned by GHSA

Description

Version 0.8.0 contained malicious code. The package targeted the Ethereum cryptocurrency and performed transactions to wallets not controlled by the user.

## Recommendation

Remove the package from your environment. Ensure no Ethereum funds were compromised.

Affected packages

EcosystemPackageAffectedFixedRecord
npm js-shc3 >= 0.0.0 — GHSA-69mf-2cw2-38m8

References