npm · Malicious package advisory
Malwareywoeuwe
MAL-2024-8730
Malicious code in ywoeuwe (npm)
Details
The package contains obfuscated code to load content from a suspicious external domain in the user's browser
Compromised versions (1)
- 13.82.20
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.