2 matches found
Malware in transform-member-expression-literals
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
5.8AI score
SaveExploits0References1Affected Software1
Malicious Package
Overview transform-member-expression-literals is a malicious package. This package was recognized as part of the 'PhantomRaven' supply chain campaign, which involves credential-stealing malware. The package impersonates well-known ecosystem plugins to deceive developers into installing it...
9.8CVSS5.9AI score
SaveExploits0References3
20