PT-2020-21260
تاريخ النشر
2020-09-02
·
تاريخ التحديث
2020-09-02
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
requets (affected versions not specified)
Description
The
requets package is a typosquatted version of a popular package with a similar name. It tracks users who have installed the incorrect package and uploads information to a remote server, including the name of the downloaded package, the name of the intended package, the Node version, and whether the process is running as sudo. There is no further compromise.Recommendations
Remove the
requets package from your dependencies.
Always ensure package names are typed correctly upon installation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾