Malicious Package in bp66 - Cryptocurrency Wallet Exfiltration
Summary
GHSA-8gc6-65mm-xr6r: Malicious Package in bp66. Affects bp66 versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The bp66 package is an npm package that is used for a specific purpose. It has been found to contain malware that is designed to find and exfiltrate cryptocurrency wallets. This means that any computer with this package installed or running should be considered fully compromised. It is important to note that removing the package may not remove all the malicious software that may have been installed as a result of its installation.
Vulnerability Detail
The vulnerability in the bp66 package is due to the presence of malware. The package is designed to search for and steal cryptocurrency wallets, which can result in the loss of funds for the affected users. This is a critical vulnerability as it can lead to financial loss and compromise the security of the affected systems. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.1.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The bp66 package has been found to contain malware that is designed to find and exfiltrate cryptocurrency wallets. Any computer with this package installed or running should be considered fully compromised. It is crucial to rotate all secrets and keys stored on the affected computer and remove the package. However, complete removal of any malicious software may require additional security measures. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for bp66 →
FAQ
The impact of this vulnerability is the potential loss of funds from compromised cryptocurrency wallets and the compromise of the affected systems.
If you have the bp66 package installed or running on your computer, it should be considered compromised. It is recommended to take immediate action to secure your system.
Recovering funds from a compromised cryptocurrency wallet can be challenging. It is important to take preventive measures and secure your systems to avoid such situations.
The recommended mitigation for this vulnerability is to rotate all secrets and keys stored on the affected computer and remove the bp66 package. However, it is important to note that complete removal of any malicious software may require additional security measures.
For more information about this vulnerability, you can refer to the GitHub advisory database at the following link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-8gc6-65mm-xr6r/GHSA-8gc6-65mm-xr6r.json
References
Related vulnerabilities
Recent vulnerabilities recorded for bp66.
