GHSA-4r5x-qjqc-p579
Tracking Module in botbait
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
The module `botbait` is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.
`botbait` is known to record and track user information.
The module tracks the following information.
- Source IP
- process.versions
- process.platform
- How the module was invoked (test, require, pre-install)
## Recommendation
This package has no functional value, and should be removed from your environment if discovered.
References
External links from the advisory. They lead to third-party sites.