Malicious Package in commandre - Critical Vulnerability
Summary
GHSA-r8hx-3qx6-hxq9: Malicious Package in commandre. Affects commandre versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The commandre package is an npm package used for executing commands in Node.js applications. It provides a convenient way to run shell commands and retrieve their output. The package is widely used in various projects and allows developers to interact with the command line from their Node.js code. However, all versions of the commandre package were found to contain malware that is designed to find and exfiltrate cryptocurrency wallets.
Vulnerability Detail
The commandre package, in all its versions, contained a malicious payload that can compromise the security of the host system. The malware is specifically designed to search for cryptocurrency wallets and steal their contents. Once installed, the package gives full control of the computer to an external entity, making it fully compromised. As a result, all secrets and keys stored on the affected computer should be rotated immediately from a different, secure computer. Although removing the package is recommended, it may not guarantee the removal of all malicious software that may have been installed as a result of its installation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to follow the recommended steps for fixing the issue and securing the affected systems.
Conclusion
The commandre package has been found to contain a critical vulnerability that compromises the security of the host system. It is crucial to take immediate action by identifying and securing all systems running the package. Rotate all secrets and keys stored on the affected systems, remove the package, and conduct a thorough security audit. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for commandre →
FAQ
The commandre package is an npm package used for executing commands in Node.js applications. It allows developers to run shell commands and retrieve their output.
The impact of this vulnerability is severe. Once the commandre package is installed, it gives full control of the computer to an external entity, compromising the security of the system. The malware in the package is designed to find and exfiltrate cryptocurrency wallets.
To fix this vulnerability, you should identify all systems running the commandre package and consider them as fully compromised. Rotate all secrets and keys stored on the affected systems from a different, secure computer. Remove the commandre package from the affected systems and perform a thorough security audit.
No, there is no known workaround for this vulnerability. It is crucial to follow the recommended steps for fixing the issue and securing the affected systems.
Removing the commandre package may not guarantee the removal of all malicious software that may have been installed as a result of its installation. It is recommended to perform a thorough security audit to ensure no other malicious software is present on the compromised systems.
References
Related vulnerabilities
Recent vulnerabilities recorded for commandre.
