Malicious Package

Overview karma-i-ua is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-547 Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...