Malware in @m365-admin/nav

Invalid Advisory This advisory has been withdrawn as the ownership has been transferred to a valid owner organization. This link is maintained to preserve external references. Original Advisory Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @m365-admin/nav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca8b90e02efef666370b40f0b2ad1cda6842e1d703eae103f1b15988d40bd543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @m365-admin/nav is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...