Malicious code in signurl-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 902b1bd6f866ecb35b997d63be6d3ac6e3b998f5fcd6f9a466bb4b09add76c55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview signurl-bindings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...