Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
โš ๏ธ This package seems to have critical severity install script vulnerabilities

Affected script: "install-scripts:preinstall"

The code is designed to collect sensitive information from the system running it and send the data to a remote server. It collects the package name, directory, user's home directory, hostname, username, DNS servers, and other package information, then encodes it and sends it via HTTPS POST request to a potentially malicious hostname, indicated by the use of a suspicious domain that suggests it is intended for capturing data (OAST - Out of Band Application Security Testing). This action can leak sensitive information and compromise system and user privacy.

Generated on Nov 10, 2023 via pnpm

plugin-getting-started 0.0.1

"Aiven POC "
Package summary
Share
0
issues
0
licenses
Package created
13 Nov 2023
Version published
10 Nov 2023
Maintainers
0
Total deps
0
Direct deps
0
License
ISC

Issues

0
This package has no issues

All Versions