Lucene search

MAL-2022-6070 Malicious code in sh0rtiwd (npm)

🗓️ 19 Aug 2022 03:20:55Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Malicious code in sh0rtiwd (npm). Any computer with this package installed is compromised and requires immediate secret and key rotation

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Source	Link
github	www.github.com/advisories/GHSA-f47c-7q5c-hw68

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Aug 2022 03:55Current

7High risk

Vulners AI Score7

malicious code sh0rtiwd (npm)compromised secret rotation key rotation outside entity software installation