Malicious Package in bpi66 - Cryptocurrency Wallet Exfiltration
Summary
GHSA-7xc4-793x-25jp: Malicious Package in bpi66. Affects bpi66 versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bpi66 is an npm package that has been found to contain malware. It is designed to find and exfiltrate cryptocurrency wallets. This package is used in various applications and can pose a significant security risk to systems that have it installed.
Vulnerability Detail
The bpi66 package, in all versions, contains malware that is specifically designed to search for and steal cryptocurrency wallets. Once installed, the package gives full control of the compromised computer to an external entity. As a result, all secrets and keys stored on that computer should be rotated immediately from a different computer. Removing the package may not guarantee the removal of all malicious software resulting from its installation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The bpi66 package has been found to contain malware that can exfiltrate cryptocurrency wallets. Systems with this package installed should be considered fully compromised, and all secrets and keys stored on them should be rotated immediately. Removing the package may not guarantee the removal of all malicious software. It is crucial to conduct a thorough security audit to identify any other potential compromises or vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bpi66 →
FAQ
The impact of this vulnerability is severe as it allows an external entity to gain full control of the compromised computer and exfiltrate cryptocurrency wallets. All secrets and keys stored on the affected system should be considered compromised.
You can check if your system is affected by using the Vulert Playground at Vulert Scanner. Simply input your package-lock.json file to see if it contains the vulnerable bpi66 package.
While removing the bpi66 package is recommended, it may not guarantee the removal of all malicious software resulting from its installation. A thorough security audit should be conducted to identify any other potential compromises or vulnerabilities.
If your system is affected, it is crucial to rotate all affected secrets and keys from a different, secure computer. Additionally, conduct a thorough security audit to identify any other potential compromises or vulnerabilities.
To prevent this vulnerability, it is essential to regularly update and patch all software components, including npm packages. Additionally, ensure that you only install packages from trusted sources and conduct security audits to identify any potential risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for bpi66.
