EUVD-2025-33309

Malicious code in @testcarrot/supply9 npm...

MAL-2025-48104 Malicious code in @testcarrot/supply9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e64b8769946e17d6a9951cd96ba45d155e96154c402b9afd04bfac0734c7f0cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @testcarrot/supply9

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...