npm · Malicious package advisory
Malware@rambler-help/shared
MAL-2024-11278
Malicious code in @rambler-help/shared (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
Compromised versions (30)
- 0.1.99
- 0.2.99
- 0.3.99
- 0.4.99
- 0.5.99
- 0.6.99
- 0.7.99
- 0.8.99
- 0.9.99
- 0.10.99
- 0.11.99
- 0.12.99
- 0.13.99
- 0.14.99
- 0.15.99
- 1.99.99
- 2.99.99
- 3.99.99
- 4.99.99
- 5.99.99
- 6.99.99
- 7.99.99
- 8.99.99
- 9.99.99
- 10.99.99
- 11.99.99
- 12.99.99
- 13.99.99
- 14.99.99
- 15.99.99
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.