npm/coa: critical
Embedded malware in coa
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-73qr-pfmq-6rp8
- https://github.com/veged/coa/issues/99
- https://github.com/veged/coa
- https://therecord.media/malware-found-in-coa-and-rc-two-npm-packages-with-23m-weekly-downloads
- https://www.virustotal.com/gui/file/26451f7f6fe297adf6738295b1dcc70f7678434ef21d8b6aad5ec00beb8a72cf?nocache=1
published · modified · JSON