GHSA-629c-j867-3v45: 
JavaScript vulnerability analysis and mitigation

The vulnerability GHSA-629c-j867-3v45 pertains to a malicious package identified in bitcoisnj-lib, an npm package. The issue was discovered and reviewed on August 31, 2020, published to the GitHub Advisory Database on September 4, 2020, and last updated on January 9, 2023. All versions of the package (>= 0.0.0) were affected, with no patched versions available (GitHub Advisory).

The vulnerability has been assigned a Critical severity rating with a CVSS score of 9.1. The CVSS v3 base metrics indicate a Network attack vector with Low attack complexity, requiring No privileges and No user interaction. The scope is Unchanged, with High impact on both Confidentiality and Integrity, while having No impact on Availability. The technical classification identifies it as CWE-506 (GitHub Advisory).

The malicious package was specifically designed to find and exfiltrate cryptocurrency wallets. Any computer with this package installed or running should be considered fully compromised, with potential unauthorized access to all secrets and keys stored on the affected system (GitHub Advisory).

The package is inherently malicious by design, requiring no additional exploitation as its malicious functionality is built into all versions. The attack vector is network-based with low complexity, requiring no special privileges or user interaction to execute its malicious functions (GitHub Advisory).

Immediate removal of the package is recommended, however, this alone may not be sufficient as the system should be considered compromised. All secrets and keys stored on affected computers should be rotated immediately from a different, uncompromised system. It's important to note that due to the potential for full system compromise, removing the package may not eliminate all malicious software that was installed (GitHub Advisory).