GHSA-X48M-GP6R-GP4V Malicious Package in rate-map

Version 1.0.3 of rate-map contains malicious code. The malware breaks functionality of the purescript-installer package by rewriting code of the dl-tar dependency. Recommendation Upgrade to version 1.0.5 or later. There is no indication of further compromise...

PT-2020-21578

Name of the Vulnerable Software and Affected Versions rate-map version 1.0.3 Description The issue concerns malicious code in version 1.0.3 of the rate-map package, which affects the functionality of the purescript-installer package by altering the code of the dl-tar dependency. Recommendations F...

Malicious Package

Overview Version 1.0.3 of rate-map contains malicious code. The malware breaks functionality of the purescript-installer package by rewriting code of the dl-tar dependency. Recommendation Upgrade to version 1.0.5 or later. There is no indication of further compromise. References GitHub Advisory...