Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that conceals a credential-stealing payload and worm propagation logic. A malicious actor associated with the "TeamPCP" or "Mini Shai-Hulud" campaign compromised a maintainer's access token; this allowed the...

@antv/dipper-widgets (=0.2.1) potentially affected by unknown CVE via @antv/dipper-hooks (=0.2.1)

@antv/dipper-hooks NPM version =0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on @antv/dipper-hooks and may be impacted: - @antv/dipper-widgets =0.2.1 Source cves: unknown CVE Source advisory: SNYK:JS-ANTVDIPPERHOOKS-16754471...