@sportdigi/bootstrapper

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (606eac7e59a098b487b61377214416850ff371fc507eb544c97622670ff87dc8)
The OpenSSF Package Analysis project identified '@sportdigi/bootstrapper' @ 12.1.2 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (18)

• 12.1.2
• 12.1.3
• 15.1.0
• 17.1.0
• 14.1.0
• 18.1.0
• 19.1.0
• 21.1.0
• 22.1.0
• 23.1.0
• 24.1.0
• 25.1.0
• 27.1.0
• 29.1.0
• 30.1.0
• 34.1.0
• 32.1.0
• 31.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.