npm · Malicious package advisory
Malwareeu.tsystems.mms.tic.testframework.pageobjects.page
GHSA-4fm6-hg6c-jprh
Malicious code in eu.tsystems.mms.tic.testframework.pageobjects.page (npm)
Details
**Severity:** Critical **Affected versions:** `= 1.0.0` --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/71b5ccd62809b0f6e173eff59b5900130cf7fc02/osv/malicious/npm/eu.tsystems.mms.tic.testframework.pageobjects.page/MAL-2024-2340.json)) **References:** - https://github.com/ossf/malicious-packages/blob/71b5ccd62809b0f6e173eff59b5900130cf7fc02/osv/malicious/npm/eu.tsystems.mms.tic.testframework.pageobjects.page/MAL-2024-2340.json - https://github.com/advisories/GHSA-4fm6-hg6c-jprh
Compromised versions (1)
- = 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.