npm · Malicious package advisory
Malwareborschik-webp-internal
MAL-2024-1834
Malicious code in borschik-webp-internal (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
Compromised versions (6)
- 1.9.15
- 1.6.6
- 1.9.16
- 1.6.5
- 2.15.9
- 2.15.10
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.