Malicious Package in web3-eht
Summary
GHSA-29fh-xcjr-p7rx: Malicious Package in web3-eht. Affects web3-eht versions >= 0.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
web3-eht is an npm package used for interacting with the Ethereum blockchain. It provides functionality for managing wallets, sending transactions, and interacting with smart contracts. The package is widely used in Ethereum development projects.
Vulnerability Detail
The web3-eht package was found to contain malware in all versions. The malicious package was designed to find and exfiltrate cryptocurrency wallets. This means that any computer with this package installed or running should be considered fully compromised. The malware has the capability to steal private keys and other sensitive information stored on the compromised computer. Removing the package may not guarantee the removal of all malicious software installed as a result of its installation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to follow the recommended steps to mitigate the impact of the compromise.
Conclusion
The web3-eht package has been found to contain a malicious package that can compromise the security of the computer it is installed on. It is crucial to follow the recommended steps to mitigate the impact of the compromise. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for web3-eht →
FAQ
web3-eht is an npm package used for interacting with the Ethereum blockchain. It provides functionality for managing wallets, sending transactions, and interacting with smart contracts.
The malicious package is designed to find and exfiltrate cryptocurrency wallets. It can steal private keys and other sensitive information stored on the compromised computer.
If you have web3-eht installed, you should consider your computer fully compromised. Rotate all secrets and keys stored on that computer immediately from a different computer. Remove the web3-eht package and perform a thorough security audit.
There is no guarantee that removing the web3-eht package will remove all malicious software resulting from its installation. A thorough security audit is recommended.
To prevent such vulnerabilities, it is important to regularly update packages and dependencies to their latest secure versions. Additionally, perform security audits and use trusted sources for package installations.
