Malicious code in fixsolara (npm)

🗓️ 25 Nov 2024 01:03:02Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 2 Views

Malicious code in fixsolara npm package; fully compromises systems, rotate secrets, remove package.

Vulners

Node

OR

npm fixsolaraMatch1.0.4

npm fixsolaraMatch1.0.5

npm fixsolaraMatch1.0.6

npm fixsolaraMatch1.0.7

npm fixsolaraMatch1.0.8

npm fixsolaraMatch1.0.9

npm fixsolaraMatch1.1.0

npm fixsolaraMatch1.1.1

npm fixsolaraMatch1.1.2

npm fixsolaraMatch1.1.3

npm fixsolaraMatch1.1.4

npm fixsolaraMatch1.1.5

npm fixsolaraMatch1.1.6

npm fixsolaraMatch1.1.7

npm fixsolaraMatch1.2.0

npm fixsolaraMatch1.2.2

npm fixsolaraMatch1.2.3

npm fixsolaraMatch1.2.4

npm fixsolaraMatch1.2.5

npm fixsolaraMatch1.2.6

npm fixsolaraMatch1.2.7

npm fixsolaraMatch1.2.8

npm fixsolaraMatch1.2.9

Source	Link
github	www.github.com/advisories/GHSA-xg8h-2r3g-76qm
npmjs	www.npmjs.com/package/fixsolara
security	www.security.snyk.io/vuln/SNYK-JS-FIXSOLARA-8400868

09 Dec 2024 14:39Current

6.9Medium risk

Vulners AI Score6.9

malicious code fixsolara compromised systems secret rotation package removal