EUVD-2022-6257

Malicious code in bioql PyPI...

google-cloudstorage-commands Command Injection vulnerability

A command injection vulnerability affects all versions of the deprecated package google-cloudstorage-commands...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection. PoC var root = require"google-cloudstorage-commands"; root.upload"./","& touch JHU", true; Remediation There is no fixed version for google-cloudstorage-commands. References - Vulnerable Code Credit: JHU System Securi...