Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5358
HistoryNov 01, 2017 - 6:53 a.m.

Malicious Module

2017-11-0106:53:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.002 Low

EPSS

Percentile

60.8%

pandora-doomsday and test-module-a are modules which can infect other modules. During installation, the module runs a postinstall script that adds the package’s author mr-robot as an owner to every other package owned by the user that ran the npm install method.

CPENameOperatorVersion
pandora-doomsdayle1.0.1
test-module-ale1.0.3

0.002 Low

EPSS

Percentile

60.8%