Malicious Package in bs58chek
Summary
GHSA-3cpj-mj3q-82wr: Malicious Package in bs58chek. Affects bs58chek versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The bs58chek package is an npm package used for encoding and decoding data in Base58Check format. It is commonly used in cryptocurrency applications for tasks such as generating and verifying wallet addresses. However, all versions of this package were found to contain malware that is designed to find and exfiltrate cryptocurrency wallets.
Vulnerability Detail
The vulnerability in bs58chek arises from the presence of malicious code in the package. When the package is installed or running on a computer, it compromises the security of the system. The malware included in the package can gain full control of the computer and has the capability to extract sensitive information, such as cryptocurrency wallet keys. This poses a significant risk to users who have installed or used this package, as their wallets and associated funds are at risk of being stolen.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended course of action is to follow the steps outlined in the 'how_to_fix' section.
Conclusion
The bs58chek package has been found to contain malware that compromises the security of the system and puts cryptocurrency wallets at risk. It is crucial to take immediate action by rotating keys and removing the package. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bs58chek →
FAQ
bs58chek is an npm package used for encoding and decoding data in Base58Check format. It is commonly used in cryptocurrency applications.
The impact of this vulnerability is significant as it allows the malware included in the package to gain full control of the compromised computer and exfiltrate cryptocurrency wallets.
To protect your computer, it is recommended to remove the bs58chek package and rotate all secrets and keys stored on the affected computer immediately.
There is no guarantee that removing the package will remove all malicious software resulting from its installation. Additional measures should be taken to ensure the security of the compromised system.
Yes, there are alternative packages available for encoding and decoding data in Base58Check format. It is recommended to use a trusted and well-maintained package from a reputable source.
References
Related vulnerabilities
Recent vulnerabilities recorded for bs58chek.
