Malicious code in isq-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba4d1661e1b74f3fad2853aff9cef3534659d4c2541685196c32bcd0c4a5dd24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3972 Malicious code in isq-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba4d1661e1b74f3fad2853aff9cef3534659d4c2541685196c32bcd0c4a5dd24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview isq-web is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...