Malicious Package in portionfatty12 - Critical Vulnerability
Summary
GHSA-p8fm-w787-x6x3: Malicious Package in portionfatty12. Affects portionfatty12 versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
portionfatty12 is an npm package that has been identified as malicious. It is designed to steal user's data by uploading their public SSH keys to a remote server. This package is no longer available on the npm Registry. If found in your environment, it indicates a compromised system that may require further response, such as rotating all credentials found on the compromised machine.
Vulnerability Detail
The portionfatty12 package, in all versions, contains malware that steals user's data. When installed, it uploads the user's public SSH keys to a remote server. This can lead to unauthorized access to sensitive information and compromise the security of the affected system. The severity of this vulnerability is rated as critical with a CVSS score of 9.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The portionfatty12 package has been identified as a malicious package that steals user's data. If found in your environment, it indicates a compromised system. It is recommended to remove the package, assess the compromised machine for further security issues, and consider rotating all credentials found on that machine. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for portionfatty12 →
FAQ
portionfatty12 is an npm package that has been identified as malicious. It is designed to steal user's data by uploading their public SSH keys to a remote server.
This vulnerability can lead to unauthorized access to sensitive information and compromise the security of the affected system.
Yes, the recommended fix is to remove the portionfatty12 package from your system and assess the compromised machine for any further security issues.
If you find portionfatty12 in your environment, it indicates a compromised system. You should consider rotating all credentials found on the compromised machine to prevent unauthorized access.
For more information about this vulnerability, you can refer to the GitHub Advisory Database: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-p8fm-w787-x6x3/GHSA-p8fm-w787-x6x3.json
References
Related vulnerabilities
Recent vulnerabilities recorded for portionfatty12.
