@bobliao/candle-view (>=0.1.4, <=0.3.8) potentially affected by unknown CVE via plugin-bugfix-v8-spread-parameters-in-optional-chaining (0.0.1-security)

plugin-bugfix-v8-spread-parameters-in-optional-chaining NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on plugin-bugfix-v8-spread-parameters-in-optional-chaining and may be impacted: - @bobliao/candle-view =0.1.4, =0.3.8 Source...

Malware in plugin-bugfix-v8-spread-parameters-in-optional-chaining

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...