Malware in npm package google-cloud-secret-manager-config-poc
malicious-version-published · active
The npm package google-cloud-secret-manager-config-poc has been flagged as malware. Any system where it was installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately from a separate, clean machine.
Affected packages
- npmgoogle-cloud-secret-manager-config-poc