Malware in npm package ecto-corsair-whisper-6f3b9

malicious-version-published · active

The npm package ecto-corsair-whisper-6f3b9 has been identified as malware. Any system where it was installed should be considered fully compromised, and all secrets and keys on that system should be rotated immediately from a different computer.

Affected packages

• npmecto-corsair-whisper-6f3b9see advisory

Sources

• ghsahttps://github.com/advisories/GHSA-5wjv-qgmc-8w9m