GHSA-4r5x-qjqc-p579MediumCVSS 5.3

Tracking Module in botbait

Published
September 1, 2020
Last Modified
February 6, 2023

🔗 CVE IDs covered (1)

📋 Description

The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.

botbait is known to record and track user information.

The module tracks the following information.

  • Source IP
  • process.versions
  • process.platform
  • How the module was invoked (test, require, pre-install)

Recommendation

This package has no functional value, and should be removed from your environment if discovered.

🎯 Affected products1

  • npm/botbait:>= 0.0.0

🔗 References (3)