Malicious Package in rate-map

Description

Version 1.0.3 of rate-map contains malicious code. The malware breaks functionality of the purescript-installer package by rewriting code of the dl-tar dependency.

Recommendation

Update the rate-map package to the latest compatible version. Followings are version details:

• Affected version(s): = 1.0.3
• Patched version(s): 1.0.5

References

• GHSA-x48m-gp6r-gp4v
• www.npmjs.com
• CWE-506

Related Issues

• Malicious Package in coffee-project - Vulnerability
• Malicious Package in ember-power-timepicker - Vulnerability
• Malicious Package in angular-material-sidenav-rnd - Vulnerability
• Malicious Package in cordova-plugin-china-picker - Vulnerability

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

rate-map