Snyk has a published code exploit for this vulnerability.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsAvoid using bowee
altogether.
bowee is a malicious package.
The package contains malicious code disguised as a preinstall script. When run, the package downloads a file from a remote server, executes it and opens a backdoor.