Malicious Package in commanedr
Summary
GHSA-xcgx-27q5-7634: Malicious Package in commanedr. Affects commanedr versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The commanedr package is an npm package that is used for a specific functionality. It has been found to contain malware that is designed to find and exfiltrate cryptocurrency wallets. This means that any computer that has this package installed or running should be considered fully compromised. It is important to rotate all secrets and keys stored on that computer immediately from a different computer. However, removing the package may not guarantee the removal of all malicious software resulting from its installation.
Vulnerability Detail
The commanedr package, in all versions, contains malware that is specifically designed to target and steal cryptocurrency wallets. This poses a significant risk to users who have installed or are running this package. The malware can potentially gain full control of the compromised computer, allowing an outside entity to access and exfiltrate sensitive information. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.1. It is crucial to take immediate action to mitigate the impact of this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The commanedr package has been found to contain malware that targets and exfiltrates cryptocurrency wallets. It is crucial to take immediate action to mitigate the impact of this vulnerability. Rotate all secrets and keys stored on affected computers from a different, non-compromised computer, and remove the commanedr package. Perform a thorough security audit to ensure the complete removal of any malicious software. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for commanedr →
FAQ
The commanedr package is an npm package used for a specific functionality.
The impact of this vulnerability is severe as it allows an outside entity to gain full control of the compromised computer and exfiltrate sensitive information, particularly cryptocurrency wallets.
To mitigate the impact of this vulnerability, it is recommended to rotate all secrets and keys stored on the compromised computer from a different, non-compromised computer. Additionally, the commanedr package should be removed from the affected computer.
No, there is no guarantee that removing the commanedr package will remove all malicious software resulting from its installation. A thorough security audit should be performed to ensure the complete removal of any malicious components.
The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.1.
References
Related vulnerabilities
Recent vulnerabilities recorded for commanedr.
