npm · Malicious package advisory
Malwarehow-to-watch-scream-6-movie-online-for-free-at-home
GHSA-96qj-g3xw-2h3j
Malicious code in how-to-watch-scream-6-movie-online-for-free-at-home (npm)
Details
**Severity:** Critical **Affected versions:** `= 1.0.0` --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/how-to-watch-scream-6-movie-online-for-free-at-home/MAL-2024-2484.json)) **References:** - https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/how-to-watch-scream-6-movie-online-for-free-at-home/MAL-2024-2484.json - https://github.com/advisories/GHSA-96qj-g3xw-2h3j
Compromised versions (1)
- = 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.