Embedded Malicious Code

Overview @ctrl/deluge is a TypeScript api wrapper for deluge using ofetch Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and...