Malicious code in feishu-js-jdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced690e77cd9a3ed298ed62aa2c407b5827af4fedd7b5b8d593c146e3f642f23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@likenttt/waline-with-feishu (>=1.24.1, <=1.24.2), @waline/vercel (>=1.18.6, <=1.28.2) potentially affected by CVE-2020-21176 via thinkjs (3.2.14)

thinkjs NPM version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on thinkjs and may be impacted: - @likenttt/waline-with-feishu =1.24.1, =1.18.6, =1.28.2 Source cves: CVE-2020-21176 Source advisory: OSV:GHSA-Q5MQ-6FJG-4MW8...