Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsAvoid using all malicious instances of the sumsub-node-websdk
package.
sumsub-node-websdk is a malicious package. This is a "typosquatting" package, which means the package name is based on existing repositories, namespaces, or components, it aims to trick users to download the package which contains a malicious code.
This package contains a hex-encoded loader which upon installation collects host metadata, decodes its follow-on script and fetches second-stage malware.