Malware in tree-sitter-r

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

@ailinone/cli (>=0.0.1, <=0.0.10), @ailinone/dev-tool (>=0.0.1, <=0.0.69) +1 more potentially affected by unknown CVE via tree-sitter-r (0.0.1-security)

tree-sitter-r NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on tree-sitter-r and may be impacted: - @ailinone/cli =0.0.1, =0.0.1, =0.0.69 - @rkarim08/sia 1.0.0 Source cves: unknown CVE Source advisory: GHSA-HHHW-6FM7-R8FF...

MAL-2024-12100 Malicious code in tree-sitter-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 245c8ac9e9a17d5087161ac19522605901bd29822d69603d3ffaf8b5fe808945 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tree-sitter-r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 245c8ac9e9a17d5087161ac19522605901bd29822d69603d3ffaf8b5fe808945 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...