Malicious Package in conistring
Summary
GHSA-cfc5-x58f-869w: Malicious Package in conistring. Affects conistring versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The conistring package is an npm package used for manipulating and working with console strings. It provides functionality for handling console input and output in various ways. The package is widely used in Node.js applications for console-based operations. However, all versions of this package were found to contain malware that is designed to find and exfiltrate cryptocurrency wallets.
Vulnerability Detail
The vulnerability in the conistring package arises from the presence of malicious software within the package. When installed or running on a computer, the package compromises the system and gives control to an external entity. As a result, all secrets and keys stored on the affected computer are at risk of being accessed and exploited. The malware specifically targets cryptocurrency wallets, aiming to steal the stored funds. It is crucial to consider any computer with this package as fully compromised, and immediate action is required to rotate all affected secrets and keys from a different computer.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The conistring package has been found to contain malware that compromises the affected computer and puts all stored secrets and keys at risk. It is crucial to take immediate action to mitigate the impact of this vulnerability by rotating affected secrets and keys and removing the package. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for conistring →
FAQ
The conistring package is an npm package used for manipulating and working with console strings in Node.js applications.
The impact of this vulnerability is severe as it compromises the affected computer and gives control to an external entity. All secrets and keys stored on the compromised computer are at risk of being accessed and exploited.
If you have the conistring package installed or running on your computer, it should be considered fully compromised. It is recommended to take immediate action to rotate all affected secrets and keys.
Removing the conistring package may not guarantee the removal of all malicious software resulting from its installation. It is crucial to follow the recommended steps to mitigate the impact of this vulnerability.
If you have the conistring package installed, you should consider your computer as fully compromised. Rotate all affected secrets and keys immediately from a different computer and remove the package.
References
Related vulnerabilities
Recent vulnerabilities recorded for conistring.
