Malicious code in sj-tw-sec (npm)

The package sj-tw-sec was found to contain malicious code...

MAL-2025-33341 Malicious code in sj-tw-sec (npm)

The package sj-tw-sec was found to contain malicious code...

Malicious Package in sj-tw-sec

All versions of sj-tw-sec contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...