2 matches found
Malware in @voiceflow/semantic-release-config
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
5.8AI score
SaveExploits0References1Affected Software1
Malicious code in @voiceflow/semantic-release-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a6c9bc458bfc9330434e338d86e85de8f5e6f5a2374749939e909a392268ad The package @voiceflow/semantic-release-config was found to contain malicious code. Source: ghsa-malware...
6.9AI score
SaveExploits0References4
20