MAL-2022-5650 Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-intl-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1232c7e53c78dc2566d0d6cfcc12422d7d7debe38b729c855588cca5796d0e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)

react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...

@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)

react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: GHSA-3H5J-8VHJ-3CMF...

Malware in react-intl-next

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...