MSC-2025-7986

ts-gaussian package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...

MSC-2025-7983

ts-gaussian package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using webhook.site to collect all the...

Malware in ts-gaussian

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ts-gaussian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28976f40d9c1e8c05d8a074ce4984cedef949d2d116e5131b5db71e55cd43695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47213 Malicious code in ts-gaussian (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28976f40d9c1e8c05d8a074ce4984cedef949d2d116e5131b5db71e55cd43695 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...