GHSA-4r5x-qjqc-p579MediumCVSS 5.3
Tracking Module in botbait
🔗 CVE IDs covered (1)
📋 Description
The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.
botbait is known to record and track user information.
The module tracks the following information.
- Source IP
- process.versions
- process.platform
- How the module was invoked (test, require, pre-install)
Recommendation
This package has no functional value, and should be removed from your environment if discovered.
🎯 Affected products1
- npm/botbait:>= 0.0.0