npm · Malicious package advisory
Malwaretangram
MAL-2024-3078
Malicious code in tangram (npm)
Details
False positive caused by problematic ingestion. --- _-= Per source details. Do not edit below this line.=-_
Compromised versions (9)
- 4.714.1
- 1.711.1
- 2.712.1
- 8.817.1
- 3.713.1
- 7.717.1
- 1.2.0-3e1
- 5.715.1
- 6.716.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.