@ibm-ptc/greet-me@0.0.1-security vulnerabilities

security holding package

Direct Vulnerabilities

Known vulnerabilities in the @ibm-ptc/greet-me package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Embedded Malicious Code

@ibm-ptc/greet-me is a malicious package. that is designed to exfiltrate data and spawn a reverse shell on any system that installs it. An attacker could open ports to the target machines, forcing communication and enabling a complete takeover of the target machine.

How to fix Embedded Malicious Code?

Avoid using all malicious instances of the @ibm-ptc/greet-me package.

*