2 matches found
Malicious Package in evil-package
All versions of evil-package contain malicious code. The package uploads the contents of process.env to example.com/log. Recommendation Remove the package from your environment. Given the host where the information was uploaded to there is no further indication of compromise...
3.9AI score
SaveExploits0References2Affected Software1
20