Malicious code in chawla-init-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b3b83282cb5a7c78b765bc841d165aac2df60547622ff4c760e935dc3eb3997 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview chawla-init-3 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...