7 matches found
MSC-2025-8015
react-complaint-image package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect...
MSC-2025-8012
react-complaint-image package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect...
MSC-2025-8010
react-complaint-image package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect...
MSC-2025-8007
react-complaint-image package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect...
Malicious code in react-complaint-image (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33876ade4179ec201d0e343ecacda0c424494710ea95d2c31722e32b7af5fe5c Any computer that has this package installed or running should be considered fully compromised. All...
Malware in react-complaint-image
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47341 Malicious code in react-complaint-image (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33876ade4179ec201d0e343ecacda0c424494710ea95d2c31722e32b7af5fe5c Any computer that has this package installed or running should be considered fully compromised. All...