Malicious Package in buffdr-xor
Summary
GHSA-8549-p68h-m9mc: Malicious Package in buffdr-xor. Affects buffdr-xor versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The buffdr-xor package is an npm package that is used in various projects. It provides functionality related to XOR encryption and decryption. XOR is a bitwise operation that can be used for simple encryption and obfuscation purposes. The package is widely used in the JavaScript ecosystem for applications that require XOR encryption. However, version 2.0.2 of the package was found to contain malicious code that targeted the Ethereum cryptocurrency. This code performed unauthorized transactions to wallets not controlled by the user.
Vulnerability Detail
The vulnerability in version 2.0.2 of the buffdr-xor package allowed an attacker to gain control over Ethereum funds. The malicious code included in the package performed unauthorized transactions to wallets not controlled by the user. This could result in financial loss for the affected users. The vulnerability was classified as critical with a CVSS score of 9.8. The CWE ID associated with this vulnerability is CWE-506.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended action is to remove the package and verify the integrity of Ethereum funds.
Conclusion
In conclusion, the buffdr-xor package version 2.0.2 contained malicious code that targeted Ethereum funds. This critical vulnerability could result in financial loss for affected users. To mitigate the risk, it is recommended to remove the package and verify the integrity of Ethereum funds. Regularly updating packages and dependencies is also crucial for maintaining a secure application. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for buffdr-xor →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities using package-lock.json without requiring access to the code or installation.
The impact of this vulnerability is the potential loss of Ethereum funds. The malicious code in the buffdr-xor package performs unauthorized transactions to wallets not controlled by the user, which can result in financial loss.
This vulnerability is classified as critical with a CVSS score of 9.8. It has the potential to cause significant financial loss and compromise the integrity of Ethereum funds.
The recommended mitigation for this vulnerability is to remove the buffdr-xor package from the environment and verify the integrity of Ethereum funds. It is also important to regularly update packages and dependencies to ensure the use of secure and trusted versions.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide guidance and assistance in addressing this vulnerability and securing your application.
References
Related vulnerabilities
Recent vulnerabilities recorded for buffdr-xor.
