PT-2020-21169

Published

2020-09-11

·

Updated

2020-09-11

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions angular-cli version 0.0.3
Description The issue concerns malicious code in a postinstall script. This malware is designed to exploit typing mistakes when installing modules, targeting macOS users. Upon installation, it attempts to remove files and stop processes related to McAfee antivirus.
Recommendations Remove the package from your environment and verify whether files were deleted and if processes were stopped.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-8MM3-2MCJ-CX6R
Found an issue in the description? Have something to add? Feel free to write us 👾