critical

Malware in npm package @marketplace-shared/components

malicious-version-published · active

The npm package @marketplace-shared/components has been identified as containing malware. Any system where it was installed or run should be considered fully compromised, and all secrets and keys stored on that system should be rotated immediately from a separate, clean computer.

Affected packages

Sources