npm/rc: critical
Embedded malware in rc
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g2q5-5433-rhrf
- https://github.com/dominictarr/rc
- https://therecord.media/malware-found-in-coa-and-rc-two-npm-packages-with-23m-weekly-downloads
- https://www.npmjs.com/package/rc
- https://www.virustotal.com/gui/file/26451f7f6fe297adf6738295b1dcc70f7678434ef21d8b6aad5ec00beb8a72cf?nocache=1
published · modified · JSON