yfmw-utils (=1.0.0) potentially affected by unknown CVE via lodash-utils (=0.0.1-security)

lodash-utils NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on lodash-utils and may be impacted: - yfmw-utils =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4358...

MAL-2022-4358 Malicious code in lodash-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 105145df6dade13e96fad0a9e2bf958c1a6681b381296fb5d16a13426a2a9fbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...