npm · Malicious package advisory
Malware-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love
GHSA-p65q-gxh2-xfp7
Malicious code in -john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love (npm)
Details
**Severity:** Critical **Affected versions:** `= 1.0.0` --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/eea1862cbe40a2423b64f000615ca3e48a4a6131/osv/malicious/npm/-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love/MAL-2024-1685.json)) **References:** - https://github.com/ossf/malicious-packages/blob/eea1862cbe40a2423b64f000615ca3e48a4a6131/osv/malicious/npm/-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love/MAL-2024-1685.json - https://github.com/ossf/malicious-packages/blob/fc84852a6b288884e6aa6820251bcd1312157f1f/osv/malicious/npm/-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love/MAL-2024-1685.json - https://github.com/ossf/malicious-packages/blob/090d6d2336055bbb52c865221cd7d4c0a28a3fe2/osv/malicious/npm/-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love/MAL-2024-1685.json - https://github.com/advisories/GHSA-p65q-gxh2-xfp7
Compromised versions (1)
- = 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.