@tradm/my_package_legit

Details

---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (29cce75017efa5cb89df0d22884f39b9d70b835108800ea9b64b10f295f11eb7)
The OpenSSF Package Analysis project identified '@tradm/my_package_legit' @ 1.9.24 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (12)

• 1.9.24
• 1.9.25
• 1.9.20
• 1.9.27
• 1.9.21
• 1.9.0
• 1.9.1
• 1.9.4
• 1.9.18
• 1.9.8
• 1.9.7
• 1.9.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.