Critical Vulnerability in river-mock Package
Summary
GHSA-2h3x-95c6-885r: Malicious Package in river-mock. Affects river-mock versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The river-mock package is an npm package used for mocking HTTP requests and responses in JavaScript applications. It provides a convenient way to simulate API calls during development and testing. Unfortunately, all versions of the river-mock package have been found to contain malicious code. This code uploads system information to a remote server, downloads a file, and executes it on the compromised computer.
Vulnerability Detail
The vulnerability in the river-mock package allows an attacker to gain full control of any computer that has the package installed or running. The malicious code collects sensitive information from the compromised system and can potentially expose secrets and keys stored on that computer. As a result, immediate action is required to mitigate the risk and prevent further damage.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The river-mock package has been found to contain malicious code that compromises the security of any computer it is installed or running on. It is crucial to identify and address this vulnerability promptly to prevent further damage and protect sensitive information. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for river-mock →
FAQ
The river-mock package is an npm package used for mocking HTTP requests and responses in JavaScript applications. It helps developers simulate API calls during development and testing.
The malicious code in the river-mock package uploads system information to a remote server, downloads a file, and executes it on the compromised computer. This can lead to unauthorized access, data theft, and potential compromise of sensitive information.
If you have the river-mock package installed or running on your computer, it is highly likely that your system is compromised. It is recommended to assume full compromise and take immediate action to mitigate the risk.
If your computer is affected, you should consider all secrets and keys stored on that computer as compromised. Rotate these secrets and keys from a different, secure computer. Additionally, remove the river-mock package from the affected computer and implement additional security measures to ensure system integrity.
Removing the river-mock package may not guarantee the removal of all malicious software installed as a result of its presence. It is important to take additional security measures to thoroughly clean and secure the affected systems.
References
Related vulnerabilities
Recent vulnerabilities recorded for river-mock.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
