Malicious Package in buffez-xor
Summary
GHSA-7frr-c83r-fm22: Malicious Package in buffez-xor. Affects buffez-xor versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The buffez-xor package is an npm package that is part of the Ethereum cryptocurrency ecosystem. It provides functionality related to XOR encryption and decryption. The package is vulnerable to a malicious code injection in version 2.0.2.
Vulnerability Detail
The vulnerability in version 2.0.2 of buffez-xor is due to the presence of malicious code. This code specifically targets the Ethereum cryptocurrency and performs unauthorized transactions to wallets that are not controlled by the user. The impact of this vulnerability can result in the compromise of Ethereum funds.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The buffez-xor package in version 2.0.2 contains malicious code that targets Ethereum wallets and performs unauthorized transactions. It is crucial to remove the affected package and take necessary steps to secure any compromised Ethereum funds. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for buffez-xor →
FAQ
buffez-xor is an npm package that provides XOR encryption and decryption functionality in the Ethereum cryptocurrency ecosystem.
Version 2.0.2 of buffez-xor is the version that contains the malicious code.
The vulnerability can result in the compromise of Ethereum funds as the malicious code performs unauthorized transactions to wallets not controlled by the user.
To fix this vulnerability, remove the affected package (buffez-xor) from your environment and ensure the security of your Ethereum wallets.
No specific workaround is mentioned for this vulnerability. Removing the affected package is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for buffez-xor.
