npm · Malicious package advisory
Malwareeu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests
GHSA-7f44-x79h-g2x2
Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests (npm)
Details
**Severity:** Critical **Affected versions:** `= 1.0.0` --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/71b5ccd62809b0f6e173eff59b5900130cf7fc02/osv/malicious/npm/eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests/MAL-2024-2339.json)) **References:** - https://github.com/ossf/malicious-packages/blob/71b5ccd62809b0f6e173eff59b5900130cf7fc02/osv/malicious/npm/eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests.playgroundtests/MAL-2024-2339.json - https://github.com/advisories/GHSA-7f44-x79h-g2x2
Compromised versions (1)
- = 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.