com.github.codingandcoding:mail-watcher-plugin@1.17 vulnerabilities

  • latest version

    1.17

  • first published

    4 years ago

  • latest version published

    4 years ago

  • licenses detected

  • package manager

  • Direct Vulnerabilities

    Known vulnerabilities in the com.github.codingandcoding:mail-watcher-plugin package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Malicious Package

    com.github.codingandcoding:mail-watcher-plugin is a malicious package.

    Affected versions of this package are vulnerable to Malicious Package. Inside the JAR, the backdoored code exists in the send() method of MailWatcherNotification.class which, once again, contains a different hardcoded C2 server.

    How to fix Malicious Package?

    Avoid using com.github.codingandcoding:mail-watcher-plugin altogether.

    [0,)