地图 / Trojan:JS/CoinMiner in npm files

Trojan:JS/CoinMiner in npm files

代码执行 / Malware / #687325

厂商: Node.js third-party modules
严重程度: 中危
赏金: —
弱点: Malware
研究员: @mada_uk
披露日期: 2019-10-04
资产: —
CVE: —

该报告还没有中文解读。

原文摘录

摘自原文（1251 字符中的一小部分）

I am a front end developer and use Vue.js and Visual Studio Code and have had an issue recently with scripts not running in my terminal so decided to fault find.

默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Node.js third-party modules 所有。

时间线

2019-09-03报告提交
2019-10-04公开披露

阅读 HackerOne 原文 ↗作者 @mada_uk · 版权归作者与 Node.js third-party modules 所有

同类报告

Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.Valve · 2020-02-24 · $1,500 Vulnerability in GoldSource Engine allows to upload and run an arbitrary DLL on clientValve · 2020-03-25 [z.tochka.com] Unlimited file uploads lead to malware executedQIWI · —