@eooce/sbx

Details

The package @eooce/sbx was found to contain malicious code.

---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (0c3f68a08af76f3c5412daa2b25a618ab31f5541ee496dec1392afedcf86ec33)
The OpenSSF Package Analysis project identified '@eooce/sbx' @ 2.0.7 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (8)

• 2.0.7
• 2.0.1
• 1.0.1
• 2.0.0
• 1.0.3
• 2.0.8
• 2.0.6
• 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.