tensorflowjs

Details

Package is malicious due to code obfuscation, arbitrary command execution via `child_process.spawn`, and suspicious `postinstall` script.

---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (3)

• 0.6.8
• 0.6.9
• 0.7.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.