critical

Malware in npm package "nw-demo"

malicious-version-published · active

The npm package "nw-demo" has been identified as containing malware. Any system that installed or ran this package should be considered fully compromised, and all secrets stored on it should be rotated immediately from a different machine.

Affected packages

Sources