Malicious Package in budfer-xor
Summary
GHSA-6584-gfwm-3vc3: Malicious Package in budfer-xor. Affects budfer-xor versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The budfer-xor package is an npm package used in JavaScript projects. It provides functionality related to the Ethereum cryptocurrency. The package allows users to perform transactions and interact with Ethereum wallets. However, version 2.0.2 of the package contained malicious code that targeted Ethereum funds and performed unauthorized transactions to wallets not controlled by the user.
Vulnerability Detail
The vulnerability in budfer-xor version 2.0.2 arises from the presence of malicious code. This code specifically targets Ethereum funds and conducts transactions to unauthorized wallets. The impact of this vulnerability can result in financial loss for users who have installed and used the affected version of the package. The vulnerability is rated as critical with a CVSS score of 9.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The budfer-xor package version 2.0.2 contains malicious code that targets Ethereum funds and performs unauthorized transactions. To mitigate the risk, it is crucial to remove the package from the environment and check for any compromised funds. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for budfer-xor →
FAQ
budfer-xor is an npm package used for interacting with Ethereum cryptocurrency and performing transactions.
Version 2.0.2 of budfer-xor is affected by the vulnerability.
The vulnerability can result in financial loss for users as unauthorized transactions are conducted to wallets not controlled by the user.
To fix this vulnerability, remove the budfer-xor package from your environment and ensure no Ethereum funds have been compromised.
No specific workaround is mentioned for this vulnerability. Removing the package is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for budfer-xor.
