Malicious code in tranchess-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7db9e2f62dee5c8b0e2fa19e620493020b43a603202dba66b929c54b2a58302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6635 Malicious code in tranchess-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7db9e2f62dee5c8b0e2fa19e620493020b43a603202dba66b929c54b2a58302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview tranchess-core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...