m-backdoor@0.0.1-security vulnerabilities

security holding package

0.0.1-security

4 years ago

4 years ago

Known vulnerabilities in the m-backdoor package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
C Malicious Package m-backdoor is a Malicious Package. All versions of `m-backdoor` contain malicious code. The package downloads a file from a remote server and executes it as a preinstall script. At the time of the release of this advisory the downloaded file only defaces websites by removing elements randomly from the DOM. How to fix Malicious Package? Avoid using `m-backdoor` altogether.	*