PT-2021-24454 · Npm · Discord-Fix
Published
2021-01-29
·
Updated
2021-01-29
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
discord-fix (affected versions not specified)
Description:
A malicious package, discord-fix, was identified and removed from the npm registry. Computers with this package installed or running are considered fully compromised. Secrets and keys stored on these computers should be rotated immediately from a different computer.
Recommendations:
Remove the discord-fix package, however, be aware that this may not remove all malicious software resulting from its installation.
As a precaution, consider the computer fully compromised and take necessary steps to secure it, such as rotating all secrets and keys stored on the computer from a different computer.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Discord-Fix