Malware in sickle-wrapper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in sickle-wrapper (npm)

Source: ossf-package-analysis cf0ce8be09572968ecc56d1879825b49624c7346a7391f203ea27e9ed0805674 The OpenSSF Package Analysis project identified 'sickle-wrapper' @ 0.2.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in sickle-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92c207e657debd7f76687cc5a6784a7c9bb6819248d1e9307287a8d24c83cb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-4178 Malicious code in sickle-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92c207e657debd7f76687cc5a6784a7c9bb6819248d1e9307287a8d24c83cb7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...