supera

Details

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain.

Compromised versions (2)

• 1.0.0
• 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.