Malicious code in jworkflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05273c238a079fdb84cb37e33888269314eccf0c346e46defc9d39dc1486669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4088 Malicious code in jworkflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05273c238a079fdb84cb37e33888269314eccf0c346e46defc9d39dc1486669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview jworkflow is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...