OSV 1.4.0 · github-reviewed · 修改于 2021-02-24 05:23
发布时间
2021-02-24 05:23
GitHub 审查时间
2019-08-29 00:16
NVD 发布时间
—
源文件
advisories/github-reviewed/2021/02/GHSA-q2hm-gx3f-h63q/GHSA-q2hm-gx3f-h63q.json
该公告已于 2021-02-24 05:23 撤回
内容仅用于保留外部引用,请不要将其当作仍然有效的安全结论。
lita-coin 0.0.3 contains a backdoor mechanism that allows launching of hidden cryptocurrency mining operations inside the project. The code also contained a backdoor mechanism that allowed the attacker to send a cookie file back to a compromised project, and allow the attacker to execute malicious commands.
0.0.3