Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
โš ๏ธ This package seems to have critical severity install script vulnerabilities

Affected script: "install-scripts:preinstall"

The code sends a POST request to a remote server with the current user's username and the content of /etc/passwd file from the local system where the script is run. This information can be used by malicious parties to gain unauthorized access to the local system. The /etc/passwd file, in particular, is a significant security vulnerability as it contains user account details.

bank_cron 1.6.0

Pentest (no malicious purposes)
Package summary
Share
0
issues
0
licenses
Package created
5 Oct 2023
Version published
4 Oct 2023
Maintainers
0
Total deps
0
Direct deps
0
License
ISC
Error Generating Report

All Versions