Malicious Package

Overview got-hacked is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in @sravni/oh-my-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d5a9d6c5db676e55f454b52c1e72eb9a693296cbfe082bee92f226a36ddece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oh-my-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4b827f2db0aa6d95ae246696f5d66665a7017fc655274fc98c6f3e38f78e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5036 Malicious code in oh-my-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e4b827f2db0aa6d95ae246696f5d66665a7017fc655274fc98c6f3e38f78e8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@alauda/custom-webpack (>=4.0.0, <=4.4.0), @glow-app/glow-client (0.3.0) +43 more potentially affected by CVE-2022-33987 via got (>=12.0.0, <=12.0.4)

got NPM version =12.0.0, =4.0.0, =1.0.1, =6.1.1, =11.1.2, =9.2.2, =4.1.2, =4.0.2, =1.0.0, =1.7.0, =0.0.0, =2.1.0, =1.1.0, =1.10.0, =2.5.0, =2.5.1 and more Source cves: CVE-2022-33987 Source advisory: OSV:GHSA-PFRX-2Q88-QQ97...

Got allows a redirect to a UNIX socket

The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket...

GHSA-PFRX-2Q88-QQ97 Got allows a redirect to a UNIX socket

The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket...

03_class (>=1.0.0, <=1.0.1), @2bad/bitrix (>=2.4.0, <=2.5.1) +700 more potentially affected by CVE-2022-33987 via got (>=11.0.0, <=11.8.3)

got NPM version =11.0.0, =1.0.0, =2.4.0, =0.0.14-canary.0, =4.1.0, =2.3.0, =0.0.0-development, =1.10.1, =0.4.1, =0.10.48, =0.10.0, =0.10.4 and more Source cves: CVE-2022-33987 Source advisory: OSV:GHSA-PFRX-2Q88-QQ97...

03_class (>=1.0.0, <=1.0.1), @2bad/bitrix (>=2.4.0, <=2.5.1) +700 more potentially affected by CVE-2022-33987 via got (>=11.0.0, <=11.8.3)

got NPM version =11.0.0, =1.0.0, =2.4.0, =0.0.14-canary.0, =4.1.0, =2.3.0, =0.0.0-development, =1.10.1, =0.4.1, =0.10.48, =0.10.0, =0.10.4 and more Source cves: CVE-2022-33987 Source advisory: GHSA-PFRX-2Q88-QQ97...

@alauda/custom-webpack (>=4.0.0, <=4.4.0), @glow-app/glow-client (0.3.0) +43 more potentially affected by CVE-2022-33987 via got (>=12.0.0, <=12.0.4)

got NPM version =12.0.0, =4.0.0, =1.0.1, =6.1.1, =11.1.2, =9.2.2, =4.1.2, =4.0.2, =1.0.0, =1.7.0, =0.0.0, =2.1.0, =1.1.0, =1.10.0, =2.5.0, =2.5.1 and more Source cves: CVE-2022-33987 Source advisory: GHSA-PFRX-2Q88-QQ97...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

DEBIAN-CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

UBUNTU-CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

Design/Logic Flaw

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

@alauda/custom-webpack (>=4.0.0, <=4.4.0), @glow-app/glow-client (0.3.0) +43 more potentially affected by CVE-2022-33987 via got (>=12.0.0, <=12.0.4)

got NPM version =12.0.0, =4.0.0, =1.0.1, =6.1.1, =11.1.2, =9.2.2, =4.1.2, =4.0.2, =1.0.0, =1.7.0, =0.0.0, =2.1.0, =1.1.0, =1.10.0, =2.5.0, =2.5.1 and more Source cves: CVE-2022-33987 Source advisory: MEND:CVE-2022-33987...

CVE-2022-33987

The got package before 12.1.0 also fixed in 11.8.5 for Node.js allows a redirect to a UNIX socket...

PT-2022-21949

Name of the Vulnerable Software and Affected Versions got package versions prior to 12.1.0 got package versions prior to 11.8.5 Description The issue allows a redirect to a UNIX socket. This is related to the got package for Node.js. Recommendations For versions prior to 12.1.0, update to version...

got 安全漏洞

got is a user-friendly and powerful HTTP request library for Node.js. A security vulnerability exists in versions of got prior to 12.1.0 that originates from allowing redirection to UNIX sockets...