Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
โš ๏ธ This package seems to have critical severity install script vulnerabilities

Affected script: "install-scripts:preinstall"

The code is basically creating an object which contains the hostname, home directory, user info, and list of DNS servers from the installed system. Then this object is being converted into a string and posted to a suspicious-looking domain "qpjw7bvg5ov51rua11o4fv7lnct3ht5i.oastify.com". This can be clearly considered as a security vulnerability, as it seems to be an attempt to steal sensitive data from the host system and send it to a potentially malicious domain. This such practice may lead to privacy breaches and potential access to more exposes vulnerabilities on the user's system.

Generated on Oct 7, 2023 via pnpm

shopify-asyncview 5.0.9

Package summary
Share
0
issues
0
licenses
Package created
9 Oct 2023
Version published
5 Oct 2023
Maintainers
0
Total deps
0
Direct deps
0
License
ISC

Issues

0
This package has no issues

All Versions