Malicious Package in sb58
Summary
GHSA-674r-xx4c-gj7x: Malicious Package in sb58. Affects sb58 versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sb58 package is an npm package used for encoding and decoding base58 strings. It is commonly used in cryptocurrency applications to handle wallet addresses. The package provides functions to convert between base58 and binary representations of data. Unfortunately, all versions of this package were found to contain malware that is designed to find and exfiltrate cryptocurrency wallets.
Vulnerability Detail
The vulnerability in sb58 arises from the presence of malicious code within the package. When the package is installed or running on a computer, it compromises the security of that computer. The malware is specifically designed to search for and steal cryptocurrency wallets, which can result in significant financial loss for the affected users. It is important to note that removing the package may not completely remove all the malicious software, as the attacker may have gained full control of the compromised computer.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The sb58 package has been found to contain malware that compromises the security of the affected computer. It is crucial to act promptly and follow the recommended steps to mitigate the potential damage. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for sb58 →
FAQ
sb58 is an npm package used for encoding and decoding base58 strings. It is commonly used in cryptocurrency applications.
The malware in sb58 is designed to find and exfiltrate cryptocurrency wallets, potentially resulting in financial loss for the affected users.
If you have the sb58 package installed, consider your computer fully compromised. Rotate all secrets and keys stored on the compromised computer immediately and remove the sb58 package.
There is no guarantee that removing the sb58 package will remove all the malicious software. The attacker may have gained full control of the compromised computer.
If you suspect your computer is compromised, take immediate action. Rotate all secrets and keys stored on the compromised computer and remove the sb58 package. Consider seeking professional assistance to ensure thorough remediation.
