critical

Malware in npm package @common-stack/generate-plugin

malicious-version-published · active

The npm package @common-stack/generate-plugin was found to contain malware. Any computer with this package installed should be considered fully compromised, and all secrets and keys on that machine should be rotated immediately from a different computer.

Affected packages

Sources