mg-start-node (>=1.0.1, <=1.0.5) potentially affected by unknown CVE via mongobd (0.0.1-security.0)

mongobd NPM version 0.0.1-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on mongobd and may be impacted: - mg-start-node =1.0.1, =1.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2022-4685...

Malicious code in mongobd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5abc8f5305dab0b5e1d95e8e794cc4b160c5a2d4999d4900d4ad894054dcea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...