critical

Malware in npm package ioredis-typed (GHSA-wvg2-6r77-9m78)

malicious-version-published · active

The npm package ioredis-typed has been flagged as containing malware. Any system with this package installed should be considered fully compromised, with all secrets and keys requiring immediate rotation from a separate, clean machine.

Affected packages

Sources