Malicious code in aws-sdk-v4 (npm)

Source: amazon-inspector 3753967ef5752d68dd0880c092d77ab42bb18fe5e081c258961572581cb81aa7 Package aws-sdk-v4 impersonates @aws-sdk/client-s3 and, on require of index.js, JSON-stringifies process.env together with hostname, username, home directory, platform, and current working directory,...

Malicious Package

Overview client-s3 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malware in client-s3

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9552 Malicious code in client-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3afdd9ed1cdd4e13ff30dab0a5b828d0ea19ed92f4f27db67d2777246208b73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3afdd9ed1cdd4e13ff30dab0a5b828d0ea19ed92f4f27db67d2777246208b73e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...