Clarification and update regarding GHSA-j2h4-4g8c-mqh9 (@sahril2nd/baileys)
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 55/100
- Issue type
- Documentation
- Clarity
- Mostly clear
- Activity status
- Active
- Domain
- documentation, security
Research direction
Start by reviewing advisory GHSA-j2h4-4g8c-mqh9 and the package status on the NPM registry. Confirm the reported removal and repository takedowns, then update the advisory note to state that @sahril2nd/baileys was permanently unpublished and is no longer distributed.
Written by the indexing model from the issue text.
Description
Hello GitHub Advisory Team,
I am writing regarding advisory GHSA-j2h4-4g8c-mqh9 for the package @sahril2nd/baileys.
- The package was originally forked from an upstream repository and published without awareness of the injected malicious payload.
- The package has been completely unpublished and deleted from the NPM registry.
- All related public repositories have been taken down/secured.
I would like to request an update/clarification in the advisory note stating that the package has been permanently unpublished and removed by the author, and is no longer distributed.
Thank you for your assistance.
- Dominant language
- No language data
- Stars
- 2.5k
- Forks
- 772
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 48
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from github/advisory-database
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#9255 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#9164 · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8994 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#8898 · 4 comments · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8841 ·
All issues in github/advisory-database
Similar issues
-
triage
Difficulty 1/5 1-3 hours Newbie friendliness 88/100
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
feature pydanty:is-working
Difficulty 1/5 Under an hour Newbie friendliness 88/100
pydantic/pydantic-ai#8647 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
:watch: Not Triaged dotnet-fsharp/svc
Difficulty 1/5 Under an hour Newbie friendliness 90/100