nodes.js@0.0.1-security vulnerabilities

security holding package

Direct Vulnerabilities

Known vulnerabilities in the nodes.js package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Malicious Package

nodes.js is a package that utilises typo-squatting to get a user to download a malicious package.

The package searches and installs globally thousands of packages based on keywords node, react, react-native, vue, angular and babel to fill the system's memory as a method of Denial of Service.

How to fix Malicious Package?

Avoid using nodes.js altogether.

*