This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...
7AI score
SaveExploits0
OSV•added 2025/02/23 5:24 a.m.•4 views
MAL-2025-3944 Malicious code in yxt-factor (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...