This repository has been archived by the owner on May 29, 2023. It is now read-only.

Dependency on node-ipc #8

Open

samschr opened this issue Mar 18, 2022 · 0 comments

samschr commented Mar 18, 2022

https://nvd.nist.gov/vuln/detail/CVE-2022-23812

https://www.npmjs.com/package/@actual-app/api

The package maintainer for node-ipc pushed malware to their repo, and the actual budget api is dependent on that package.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.