medium5.3
CVE-2017-16126
Tracking Module in botbait
Impact
The module `botbait` is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. `botbait` is known to record and track user information. The module tracks the following information. - Source IP - process.versions - process.platform - How the module was invoked (test, require, pre-install) ## Recommendation This package has no functional value, and should be removed from your environment if discovered.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | botbait | >= 0.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Botbait Project | Botbait | through 2.0.0 |