MAL-2024-7865 Malicious code in some-dependency-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56bfd6dfa88a2c4dc649901d7693d3996a1297067a93e70d1b3382ff9b1448f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in some-dependency-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9892935af84d9c4a9ba16e155760875b390cbc18f318be83280fcb53a3278904 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview some-dependency is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...