Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/03/18 8:12 a.m.•4 views

Malware in transform-member-expression-literals

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/03/12 4:23 p.m.•20 views

Malicious Package

Overview transform-member-expression-literals is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it...

9.8CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder