npm · Malicious package advisory
Malwareocto-translations
MAL-2025-28130
Malicious code in octo-translations (npm)
Details
The package octo-translations was found to contain malicious code.
Compromised versions (1)
- 7.7.7
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.