critical

Malware in npm package sitecore-mm-component-style

malicious-version-published · active

The npm package "sitecore-mm-component-style" was found to contain malware. Any system with this package installed should be treated as fully compromised, and all secrets and keys on that system should be rotated immediately from a separate, clean device.

Affected packages

Sources