Tracking Module in botbait

2020-09-01T18:57:44
ID GHSA-4R5X-QJQC-P579
Type github
Reporter GitHub Advisory Database
Modified 2020-09-01T18:57:44

Description

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.

botbait is known to record and track user information.

The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked (test, require, pre-install)

Recommendation

This package has no functional value, and should be removed from your environment if discovered.