npm/impala: critical 9.8

Malicious Package in impala

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-92px-q4w8-hrr5
• https://github.com/shenfw1987/impala
• https://snyk.io/vuln/SNYK-JS-IMPALA-450989
• https://www.npmjs.com/advisories/628

published 2020-09-01T19:56:52Z · modified 2021-09-24T18:30:53Z · JSON