Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove npm package monorepo-symlink-test (contains malicious code) #291

Closed
muhanator opened this issue Aug 24, 2022 · 1 comment
Closed

Comments

@muhanator
Copy link

muhanator commented Aug 24, 2022

npm package monorepo-symlink-test is used in

"name": "monorepo-symlink-test",
"private": true,
"version": "0.0.0",

should be removed as it was found to contain malicious code and was removed from the registry by the npm security team. Anybody using npm package resolve:1.22.1 (latest version of resolve) has this in their code and can be at risk.
see https://www.npmjs.com/package/monorepo-symlink-test
image

@ljharb
Copy link
Member

ljharb commented Aug 24, 2022

This package.json has private: true, because it has nothing to do with the malicious package in question. If your security analysis tool is reporting it, it's broken, and you should file a bug on it. There is zero risk here.

See #290.

@ljharb ljharb closed this as not planned Won't fix, can't repro, duplicate, stale Aug 24, 2022
ljharb added a commit that referenced this issue Oct 10, 2023
…d security scanners

Fixes #319.
Fixes #318.
Fixes #317.
Fixes #314.
Closes #313.
Fixes #312.
Fixes #311.
Fixes #310.
Fixes #309.
Fixes #306.
Fixes #305.
Fixes #304.
Fixes #303.
Fixes #291.
Fixes #288.
ljharb added a commit that referenced this issue Oct 10, 2023
    Fixes #319.
    Fixes #318.
    Fixes #317.
    Fixes #314.
    Closes #313.
    Fixes #312.
    Fixes #311.
    Fixes #310.
    Fixes #309.
    Fixes #306.
    Fixes #305.
    Fixes #304.
    Fixes #303.
    Fixes #291.
    Fixes #288.
ljharb added a commit that referenced this issue Oct 10, 2023
    Fixes #319.
    Fixes #318.
    Fixes #317.
    Fixes #314.
    Closes #313.
    Fixes #312.
    Fixes #311.
    Fixes #310.
    Fixes #309.
    Fixes #306.
    Fixes #305.
    Fixes #304.
    Fixes #303.
    Fixes #291.
    Fixes #288.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants