@g.genie/api-demo-sample-lib4

Details

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain.

Compromised versions (2)

• 0.3.0
• 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.