{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0"}],"component":"bwffer-xor","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7qg7-6g3g-8vxg","id":"tcs_01M5KFAPMQJN3BN04TXYWNPBXY","modified_at":"2021-09-30T15:46:17Z","published_at":"2020-09-03T22:46:25Z","references":["https://osv.dev/vulnerability/GHSA-7qg7-6g3g-8vxg","https://www.npmjs.com/advisories/1269"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7qg7-6g3g-8vxg","url":"https://osv.dev/vulnerability/GHSA-7qg7-6g3g-8vxg"}],"summary":"Malicious Package in bwffer-xor"}