jquerry@0.0.1-security vulnerabilities

security holding package

0.0.1-security

3 years ago

3 years ago

Known vulnerabilities in the jquerry package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Malicious Package jquerry is a malicious package. All versions of `jquerry` contain malicious code. The `index.js` file appears to download and execute a crypto mining script. The file is not run upon installation - the package needs to be required or the `index.js` run manually. How to fix Malicious Package? Avoid using all malicious instances of the `jquerry` package.	*