npmpubman@0.0.1-security vulnerabilities

security holding package

Direct Vulnerabilities

Known vulnerabilities in the npmpubman package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Malicious Package

npmpubman is a malicious package. All versions of npmpubman contain malicious code. The index.js file sends local environment variables to a remote server. The file is not run upon installation - the package needs to be required or the index.js run manually.

How to fix Malicious Package?

There is no fixed version for npmpubman.

*