ansi-regex

Details

**Severity:** Critical

**Affected versions:** `= 6.2.1`

Any computer that has this package installed or running should be considered affected by a browser-based interceptor that hijacks network traffic and application APIs. The interceptor injects itself into functions related to web traffic and cryptocurrency wallets. The interceptor replaces values such as wallet addresses in transaction payloads and modifies the UI to hide its activity.

**References:**
- https://github.com/advisories/GHSA-jvhh-2m83-6w29

Compromised versions (1)

• = 6.2.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.