writeups.xyz / npm search RCE? - Escape Sequence Injection

Submitter : c2a

Date: 14 December 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Escape Sequence Injection

Programs :

• Radare2
• GitHub
• NPM CLI

Authors :

• Solid-Snail

Link :
https://blog.solidsnail.com/posts/npm-esc-seq