critical

Malware in npm package ecto-corsair-flag-x9m4

malicious-version-published · active

A malicious version of the npm package ecto-corsair-flag-x9m4 was published. Any system with it installed should be considered fully compromised, and all secrets and keys on that system should be rotated from a different computer.

Affected packages

Sources