0.0.1-security
1 years ago
1 years ago
Known vulnerabilities in the ethereum-cryptographyyy package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
ethereum-cryptographyyy is a malicious package. A typosquatter that makes an HTTP request to a Chinese server containing the user’s private key. How to fix Malicious Package? Avoid using all malicious instances of the | * |