Malware in npm package ethers-wordlist (GHSA-jrxm-h3fx-2p68)

malicious-version-published · active

A malicious version of the npm package "ethers-wordlist" was published containing malware. Any system where this package was installed or run should be treated as fully compromised, and all secrets and keys stored on that system should be rotated immediately from a separate, clean computer.

Affected packages

• npmethers-wordlistsee advisory

Sources

• ghsahttps://github.com/advisories/GHSA-jrxm-h3fx-2p68