cors.js@0.0.1-security vulnerabilities

security holding package

latest version

0.0.1-security

first published

2 years ago

latest version published

2 years ago

licenses detected

Unknown
>=0

View cors.js package health on Snyk Advisor (opens in a new tab)

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the cors.js package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Malicious Package cors.js is a malicious package. This is a "dependency confusion" package, which means the package name is based on existing repositories, namespaces, or components. It aims to trick users into downloading the package which contains malicious code. The vulnerable code causes a reverse remote shell establishment on the victim environment. How to fix Malicious Package? Avoid using all malicious instances of the `cors.js` package.	*

Malicious Package

cors.js is a malicious package. This is a "dependency confusion" package, which means the package name is based on existing repositories, namespaces, or components. It aims to trick users into downloading the package which contains malicious code. The vulnerable code causes a reverse remote shell establishment on the victim environment.

How to fix Malicious Package?

Avoid using all malicious instances of the cors.js package.

Go back to all versions of this package