Malicious Package in bwffer-xor: Ethereum Funds Compromised
Summary
GHSA-7qg7-6g3g-8vxg: Malicious Package in bwffer-xor. Affects bwffer-xor versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bwffer-xor is an npm package that is part of the Ethereum ecosystem. It is designed to provide functionality related to Ethereum cryptocurrency. However, version 2.0.2 of the package contained malicious code that targeted Ethereum funds. This code performed unauthorized transactions to wallets not controlled by the user.
Vulnerability Detail
The vulnerability in bwffer-xor version 2.0.2 allowed attackers to compromise Ethereum funds. By exploiting this vulnerability, attackers could perform unauthorized transactions to wallets outside the user's control. This could result in financial loss and potential damage to the user's reputation. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the bwffer-xor package version 2.0.2 contained malicious code that targeted Ethereum funds. It is crucial to remove this package from your environment and verify that no funds were compromised. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for bwffer-xor →
FAQ
bwffer-xor is an npm package that provides functionality related to Ethereum cryptocurrency.
Version 2.0.2 of bwffer-xor is affected by the malicious code.
The malicious code targeted Ethereum funds and performed unauthorized transactions to wallets not controlled by the user.
To fix this vulnerability, remove the bwffer-xor package from your environment and ensure no Ethereum funds were compromised.
The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.
References
Related vulnerabilities
Recent vulnerabilities recorded for bwffer-xor.
