Malware in wos-library-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wos-library-ui (npm)

Source: amazon-inspector 3124274f6fcb74cf0805b5545f6952214b90329427f55c616c868f760d592e63 [email protected] declares scripts.preinstall = 'node poc.js', which auto-runs on npm install. poc.js reads os.hostname, os.userInfo.username, and process.cwd and transmits them to the hardcoded Interact...