critical

Malware in @serviceshub/x-web-core npm package

malicious-version-published · active

A malicious npm package, @serviceshub/x-web-core, contained malware that fully compromises any machine where it is installed. Affected systems should be treated as compromised and all secrets rotated from a clean device.

Affected packages

Sources