Malicious Package in bugfer-xor: Ethereum Funds Compromised
Summary
GHSA-8g64-9cm2-838j: Malicious Package in bugfer-xor. Affects bugfer-xor versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bugfer-xor is an npm package that is part of the Ethereum ecosystem. It provides functionality related to the Ethereum cryptocurrency. However, version 2.0.2 of the package contained malicious code that targeted Ethereum funds. This code performed unauthorized transactions to wallets not controlled by the user.
Vulnerability Detail
The vulnerability in bugfer-xor version 2.0.2 allowed an attacker to compromise Ethereum funds. By exploiting this vulnerability, the attacker could perform transactions to wallets without the user's consent or control. This could result in financial losses for the user. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the bugfer-xor package version 2.0.2 contained malicious code that targeted Ethereum funds. It is recommended to remove the package and verify the integrity of your Ethereum funds. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for bugfer-xor →
FAQ
bugfer-xor is an npm package that provides functionality related to the Ethereum cryptocurrency.
Version 2.0.2 of bugfer-xor is the affected version that contains the malicious code.
The malicious code in bugfer-xor version 2.0.2 performed unauthorized transactions to wallets not controlled by the user, targeting Ethereum funds.
This vulnerability is rated as CRITICAL with a CVSS score of 9.8.
To protect your Ethereum funds, it is crucial to remove the malicious bugfer-xor package from your environment and ensure that no unauthorized transactions have occurred.
References
Related vulnerabilities
Recent vulnerabilities recorded for bugfer-xor.
