PT-2021-24397 · Npm · An0N-Chat-Lib
Published
2021-01-29
·
Updated
2021-01-29
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
an0n-chat-lib (affected versions not specified)
Description:
The npm
an0n-chat-lib package has been identified as malicious. Any computer with this package installed should be considered fully compromised, and all secrets and keys stored on it should be rotated immediately from a different computer.Recommendations:
Remove the
an0n-chat-lib package, but be aware that this may not remove all malicious software resulting from its installation.
As a precaution, consider the computer fully compromised and take necessary steps to secure it, such as rotating all secrets and keys stored on it from a different computer.RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
An0N-Chat-Lib