Malicious Package in radicjs - GHSA-56r9-v65c-34jm
Summary
GHSA-56r9-v65c-34jm: Malicious Package in radicjs. Affects radicjs versions 0.2.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radicjs is an npm package that provides functionality for working with JavaScript in the browser. It allows developers to manipulate and interact with the DOM, handle events, and perform other client-side operations. Unfortunately, version 0.2.1 of radicjs contained a malicious code that poses a significant security risk to applications using this package.
Vulnerability Detail
The vulnerability in radicjs version 0.2.1 involves malicious code that is executed in the browser. This code specifically targets forms and attempts to extract sensitive information such as passwords, cvc, and card numbers. The extracted data is then sent to a remote server at https://js-metrics.com/minjs.php?pl=. This unauthorized data collection can lead to severe consequences, including unauthorized access to user accounts and financial fraud.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The best course of action is to follow the recommended steps for fixing the issue.
Conclusion
The presence of malicious code in radicjs version 0.2.1 poses a critical security risk to applications using this package. It is crucial to remove the affected version, evaluate the impact on user data, and take necessary steps to mitigate the risk. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for radicjs →
FAQ
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your package-lock.json file, and Vulert will analyze it in real-time to identify any open-source vulnerabilities, including this one.
The potential consequences of this vulnerability include unauthorized access to user accounts, theft of sensitive information such as passwords and credit card details, and financial fraud.
Yes, you can still use radicjs by downgrading to version 0.2.0, which is not affected by this vulnerability. However, it is crucial to ensure that you are using a secure and trusted version of the package.
Yes, the malicious code has been removed in the latest version of radicjs. It is recommended to always use the latest version of the package to ensure you are not exposed to known vulnerabilities.
If you suspect that user data has been compromised, it is essential to take immediate action. This includes notifying affected users, resetting passwords, and implementing additional security measures to prevent further unauthorized access.
