Malicious code in myoimanshhu (npm). Any computer with this package installed is considered fully compromised. Secrets and keys should be rotated immediately from a different computer. No guarantee that removing the package will remove all malicious software.
Source | Link |
---|---|
github | www.github.com/advisories/GHSA-43r6-wwq2-m4wj |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo