2 matches found
Malicious Package
Overview deere-ui-toggle-group is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
MAL-2022-2411 Malicious code in deere-ui-toggle-group (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 288d9c18ada3058b1ce2ddd2a3b36426a6470f0e6c14ed4ed6353a95a1f31d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...