Malware in web-actions-v4

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-699 Malicious code in web-actions-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d40edcae4c894042717491d36e69b45f4b012916fc7b7dbd64e5901b3b6dda8 Any computer that has this package installed or running should be considered...