critical

Malware in npm package "coral-wraith"

malicious-version-published · active

The npm package "coral-wraith" has been identified as malware. Any system with this package installed should be considered fully compromised, and all secrets and keys stored on that system should be rotated immediately from a different computer.

Affected packages

Sources