npm/cordova-plugin-china-picker: critical 9.8

Malicious Package in cordova-plugin-china-picker

Action: No fix published. Pin and monitor.

Affected

No affected ranges in the source.

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-x9gm-qxhh-rf75
• https://git.oschina.net/BlankTrack/ChinaPicker.git
• https://github.com/advisories/GHSA-x9gm-qxhh-rf75
• https://snyk.io/vuln/SNYK-JS-CORDOVAPLUGINCHINAPICKER-451001
• https://www.npmjs.com/advisories/622

published 2020-09-01T19:51:28Z · modified 2021-09-24T17:04:30Z · JSON