Malware in @kvytech/cli

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-190742 Malicious code in @kvytech/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae232c63ad02e601361c2ec6df0ccfc38f274d3a22a1a08a5de3746dbf596c40 The package @kvytech/cli was found to contain malicious code. Source: ghsa-malware a6425961d953e5d0f73300b7a8b700773e9d1adbfc6b1364b3fa1ae59a8d798d A...

EUVD-2025-198785

Malicious code in @kvytech/cli npm...