Malware in npm package "sensivity" (GHSA-f4f4-69p9-w9f9)

malicious-version-published · active

The npm package "sensivity" has been identified as containing malware. Any system with this package installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately from a different computer.

Affected packages

• npmsensivitysee advisory

Sources

• ghsahttps://github.com/advisories/GHSA-f4f4-69p9-w9f9