flexbiz-core (>=17.0.5, <=17.0.16) potentially affected by unknown CVE via x-tree-view (0.0.1-security)

x-tree-view NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on x-tree-view and may be impacted: - flexbiz-core =17.0.5, =17.0.16 Source cves: unknown CVE Source advisory: GHSA-MJHC-7VMM-6QR3...

Malware in x-tree-view

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-1237 Malicious code in x-tree-view (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61b6ca0784ee478a2ed8461e3bf79ca722ead00764ed795cbda13b255488f3f6 Any computer that has this package installed or running should be considered...