Malicious Package in bitcoin-sweep
Summary
GHSA-8hqw-qp6r-vqcm: Malicious Package in bitcoin-sweep. Affects bitcoin-sweep versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bitcoin-sweep is an npm package used for cryptocurrency wallet management. It provides functionality for finding and managing cryptocurrency wallets. However, all versions of this package were found to contain malware. The package was specifically designed to identify and extract cryptocurrency wallets from compromised computers.
Vulnerability Detail
The presence of this malicious package poses a significant security risk. Any computer that has this package installed or running should be considered fully compromised. The malware within the package can exfiltrate sensitive information, including cryptocurrency wallet secrets and keys. It is crucial to rotate all affected secrets and keys immediately from a different computer. Although removing the package is recommended, it may not guarantee the removal of all malicious software that may have been installed as a result of its presence.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The presence of the malicious package in bitcoin-sweep poses a critical security risk. It is essential to take immediate action by rotating affected secrets and keys and removing the package. Conducting a thorough security audit is recommended to ensure complete removal of any remaining malicious software. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for bitcoin-sweep →
FAQ
bitcoin-sweep is an npm package used for cryptocurrency wallet management.
The malicious package within bitcoin-sweep is designed to find and exfiltrate cryptocurrency wallets from compromised computers.
If you have the bitcoin-sweep package installed, consider your computer fully compromised. Rotate all affected secrets and keys from a different computer and remove the package.
Removing the bitcoin-sweep package is recommended, but it may not guarantee the removal of all malicious software that may have been installed as a result of its presence. Conduct a thorough security audit to ensure complete removal.
To prevent similar vulnerabilities, regularly update your packages, use trusted sources, and conduct security audits to identify any potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for bitcoin-sweep.
