MAL-2022-3808 Malicious code in indy-vdr-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100d7d507e1de15d089d8a333266fbd1c2a02baa06348b81ee159fd787510d38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview indy-vdr-shared is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...