color-string

Details

**Severity:** Critical

**Affected versions:** `= 2.1.1`

### Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-286p-vc9p-p5qv. This link is maintained to preserve external references.

### Original Description
Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values such as wallet addresses in transaction payloads and modifies the UI to hide its activity.

**References:**
- https://github.com/github/advisory-database/issues/6099
- https://github.com/Qix-/color-string/security/advisories/GHSA-286p-vc9p-p5qv
- https://github.com/advisories/GHSA-3q87-f72r-3gm6

Compromised versions (1)

• = 2.1.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.