npm · Malicious package advisory
Malwarehwieiur
MAL-2024-8728
Malicious code in hwieiur (npm)
Details
The package contains obfuscated code to load content from a suspicious external domain in the user's browser
Compromised versions (1)
- 11.37.2
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.