Malicious Package in evil-package

All versions of evil-package contain malicious code. The package uploads the contents of process.env to example.com/log. Recommendation Remove the package from your environment. Given the host where the information was uploaded to there is no further indication of compromise...

PT-2020-21427

Name of the Vulnerable Software and Affected Versions evil-package versions affected versions not specified Description The issue concerns malicious code in the evil-package that uploads the contents of process.env to the "example.com/log" endpoint. There is no indication of further compromise...

Malicious Package

Overview All versions of evil-package contain malicious code. The package uploads the contents of process.env to example.com/log. Recommendation Remove the package from your environment. Given the host where the information was uploaded to there is no further indication of compromise. References...