CVE-2019-19771

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name

published December 12, 2019

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name. In particular, the Trojan horse finds and exfiltrates cryptocurrency wallets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01257 · 69.3th percentile
Published
2019-12-12T19:49Z
EPSS history
Timeline
  • 12 DEC 19:49Z
    The lodahs package 0.0.1 for Node.js is a Trojan horse, and may have been installed by persons who mistyped the lodash package name
    cvelistv5