CVE-2022-5562: Malicious code in query-graph (npm)
Summary
MAL-2022-5562: Malicious code in query-graph (npm). Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The query-graph package is an npm package that provides functionality for querying and manipulating graph data. It is commonly used in applications that deal with graph databases or graph-based data structures. The package allows users to perform various operations on graphs, such as adding or removing nodes and edges, querying for specific nodes or edges, and traversing the graph. However, the package has been found to contain malicious code, which can compromise the security of any system that has it installed or running.
Vulnerability Detail
The query-graph package has been identified as containing malicious code. This code can give full control of the affected computer to an outside entity, compromising the security of the system. As a result, all secrets and keys stored on the affected computer should be rotated immediately from a different computer. Simply removing the package may not be sufficient, as there is no guarantee that all malicious software resulting from its installation will be removed. The presence of this vulnerability poses a significant risk to the confidentiality, integrity, and availability of the affected system.
How To Fix
This package is malicious. Remove it and rotate any credentials it could have accessed.
npm uninstall query-graphIf it arrived as a transitive dependency, remove the package that pulled it in, then reinstall.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to follow the steps outlined in the 'how_to_fix' section to mitigate the risk and ensure the security of the affected system.
Conclusion
The presence of malicious code in the query-graph npm package poses a significant security risk to any system that has it installed or running. It is crucial to take immediate action to mitigate the vulnerability, including rotating secrets and keys, removing the package, and conducting a thorough security audit. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for query-graph →
FAQ
This vulnerability can result in full control of the affected computer being given to an outside entity. It compromises the security of the system and exposes any secrets and keys stored on that computer.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply provide the package-lock.json file, and Vulert will analyze it in real-time and alert you if any open-source vulnerabilities, including this one, are found.
If your system is affected, it is crucial to rotate all secrets and keys stored on the affected computer from a different, trusted computer. Additionally, remove the query-graph package and conduct a thorough security audit to identify any other potential compromises or vulnerabilities.
While removing the query-graph package is recommended, it may not be sufficient to remove all malicious software resulting from its installation. Therefore, it is essential to rotate all secrets and keys stored on the affected computer and conduct a thorough security audit.
In addition to fixing the vulnerability and conducting a security audit, it is recommended to implement additional security measures, such as monitoring and intrusion detection systems, to prevent future incidents and enhance the overall security of the system.
