OSV 1.4.0 · github-reviewed · 修改于 2021-09-30 04:33
发布时间
2020-09-04 04:46
GitHub 审查时间
2020-09-01 02:50
NVD 发布时间
—
源文件
advisories/github-reviewed/2020/09/GHSA-4xg9-g7qj-jhg4/GHSA-4xg9-g7qj-jhg4.json
All versions of comander contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive.
Remove the package from your environment and verify whether your system is running the cryptocurrency miner.