Lodahs Project: Security Vulnerabilities
The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.
CVSS Score
8.8
EPSS Score
0.004
Published
2019-12-12