Vulnerability	Vulnerable Version
C Embedded Malicious Code @velora-dex/sdk is a SDK for the Velora API Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through `dist/index.js`. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a base64-decoded command that silently downloads a script from an external server and pipes it to bash for background execution. How to fix Embedded Malicious Code? Avoid using all malicious instances of the `@velora-dex/sdk` package.	=9.4.1

Embedded Malicious Code

@velora-dex/sdk is a SDK for the Velora API

Affected versions of this package are vulnerable to Embedded Malicious Code that delivers a malicious payload through dist/index.js. An attacker uploaded a compromised version of the package directly to the npm registry. The payload runs a base64-decoded command that silently downloads a script from an external server and pipes it to bash for background execution.

How to fix Embedded Malicious Code?

Avoid using all malicious instances of the @velora-dex/sdk package.

=9.4.1

Go back to all versions of this package