GHSA-rwcq-qpm6-7867: 
JavaScript vulnerability analysis and mitigation

The riped160 package was identified as a malicious package containing cryptocurrency wallet exfiltration malware. This critical severity vulnerability (GHSA-rwcq-qpm6-7867) affects all versions of the riped160 npm package. The vulnerability was discovered and reviewed on August 31, 2020, published to the GitHub Advisory Database on September 3, 2020, and last updated on January 9, 2023. The package received a CVSS score of 9.1, indicating critical severity (GitHub Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 9.1, with the following metrics: Network attack vector, Low attack complexity, No privileges required, No user interaction needed, Unchanged scope, High confidentiality impact, High integrity impact, and No availability impact (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). The vulnerability is classified under CWE-506 (GitHub Advisory).

The malicious package was designed to locate and exfiltrate cryptocurrency wallets from infected systems. Any computer with this package installed or running should be considered fully compromised, as it may have given complete control to malicious actors (GitHub Advisory).

The package is highly exploitable due to its network attack vector, low attack complexity, and no requirement for privileges or user interaction. All versions of the package (>= 0.0.0) are affected, with no patched versions available (GitHub Advisory).

It is recommended to immediately rotate all secrets and keys stored on affected computers, using a different, uncompromised system. While the package should be removed, it's important to note that removing the package may not eliminate all malicious software resulting from its installation, as the system should be considered fully compromised (GitHub Advisory).