@crowdstrike/ember-oss-docs (>=1.0.1, <=1.1.8) potentially affected by unknown CVE via ember-url-hash-polyfill (1.0.11)

ember-url-hash-polyfill NPM version 1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on ember-url-hash-polyfill and may be impacted: - @crowdstrike/ember-oss-docs =1.0.1, =1.1.8 Source cves: unknown CVE Source advisory: GHSA-WXVV-C37V-JFMC...

Malware in ember-url-hash-polyfill

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...