critical

Malware in npm package forge-jsxy

malicious-version-published · active

The npm package forge-jsxy has been identified as containing malware. Any system with this package installed should be considered fully compromised, and all secrets and keys should be rotated immediately from a separate, clean computer.

Affected packages

Sources