POC详情： c184cd2aa2e7d63d16129cffc3736196bdbd01b5

描述

Detected the .yarn-integrity file generated by the Yarn package manager and stored in node_modules/.yarn-integrity.Exposure of this file could have revealed sensitive dependency information and aided attackers in identifying vulnerable packages for supply chain attacks.

文件快照

 id: yarn-integrity-disclosure

info:
  name: Yarn Integrity File Disclosure
  author: pussycat0x
  s

...

备注