critical

Malware in npm package use-context-selector-tony

malicious-version-published · active

A malicious npm package named "use-context-selector-tony" was published and flagged by GitHub. Any machine where it was installed should be treated as fully compromised, with all secrets and keys rotated from a different computer.

Affected packages

Sources