GHSA-353r-3v84-9pjjCriticalCVSS 9.8Disclosed before NVD

Malicious Package in nothing-js

Published
September 1, 2020
Last Modified
January 9, 2023

📋 Description

nothing-js contained a malicious script that attempted to delete all files when npm test was run.

Recommendation

This module has been unpublished from the npm Registry. If you find this module in your environment remove it.

🎯 Affected products1

  • npm/nothing-js:>= 0

🔗 References (2)