Malicious Package in rimrafall: System-wide File Deletion
Summary
GHSA-8hq2-fcqm-39hq: Malicious Package in rimrafall. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
rimrafall is an npm package that is vulnerable to a critical security issue. It is designed to provide certain functionality, but version 1.0.0 of the package contains a malicious code as a preinstall script. This code attempts to remove all files in the system's root folder, leading to potential data loss and system instability.
Vulnerability Detail
The vulnerability in rimrafall version 1.0.0 arises from the presence of malicious code in its preinstall script. When this version is installed, the package attempts to delete all files in the system's root folder. This can have severe consequences, potentially resulting in the loss of important data and rendering the system inoperable. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to take immediate action by removing the rimrafall package and restoring any deleted files.
Conclusion
rimrafall version 1.0.0 contains a critical vulnerability that can result in the deletion of system files. It is crucial to remove the package from your system and restore any missing files. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for rimrafall →
FAQ
rimrafall is an npm package that provides certain functionality. However, version 1.0.0 of the package contains a malicious code that attempts to delete all files in the system's root folder.
The vulnerability in rimrafall version 1.0.0 can lead to the loss of important data and render the system inoperable.
To fix this vulnerability, you should remove the rimrafall package from your system and verify if any files were deleted during its installation. Restore any missing files from backups or other reliable sources.
No, there is no known workaround for this vulnerability. Immediate removal of the rimrafall package and restoration of any deleted files is necessary.
This vulnerability is rated as CRITICAL with a CVSS score of 9.8.
