Malicious Package in midway-dataproxy
Summary
GHSA-mq9h-cwc2-6j5r: Malicious Package in midway-dataproxy. Affects midway-dataproxy versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
midway-dataproxy is an npm package that provides functionality for data proxying. It is used to upload system information to a remote server, download files, and execute them. The package has been found to contain malicious code that compromises the security of the computer it is installed on.
Vulnerability Detail
The malicious code present in all versions of midway-dataproxy uploads system information to a remote server and downloads a file to execute. This compromises the entire system, and any secrets or keys stored on the affected computer should be rotated immediately from a different computer. Removing the package may not guarantee the removal of all malicious software installed as a result of its installation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The presence of malicious code in the midway-dataproxy package poses a significant security risk. It is crucial to take immediate action by considering affected computers as compromised, rotating all secrets and keys, removing the package, and conducting a thorough security audit. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for midway-dataproxy →
FAQ
midway-dataproxy is an npm package used for data proxying. It allows users to upload system information to a remote server, download files, and execute them.
The malicious code in midway-dataproxy uploads system information to a remote server and downloads a file to execute. This compromises the security of the affected computer.
If you have midway-dataproxy installed, consider your computer as fully compromised. Rotate all secrets and keys stored on the affected computer from a different, secure computer. Remove the midway-dataproxy package and perform a security audit.
There is no guarantee that removing the midway-dataproxy package will remove all malicious software installed as a result of its installation. A thorough security audit is recommended.
After removing midway-dataproxy, it is recommended to perform a thorough security audit to ensure the removal of all malicious software. Additionally, consider implementing security best practices and regularly updating your system and software.
References
Related vulnerabilities
Recent vulnerabilities recorded for midway-dataproxy.
