Malware in dependencykfeg

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18416 Malicious code in dependencykfeg (npm)

dependencykfeg 25.0.3, 25.1.3 and 25.1.9 contain no code of their own and declare a single dependency that npm fetches from a tarball in the GitHub repository GamerD11/pingtest https://github.com/GamerD11/pingtest/raw/refs/heads/main/node-acct-utils-1.0.0.tgz, whose preinstall script runs node...

Malicious code in dependencykfeg (npm)

dependencykfeg 25.0.3, 25.1.3 and 25.1.9 contain no code of their own and declare a single dependency that npm fetches from a tarball in the GitHub repository GamerD11/pingtest https://github.com/GamerD11/pingtest/raw/refs/heads/main/node-acct-utils-1.0.0.tgz, whose preinstall script runs node...