Malicious code in @cashback/how-it-works-widget (npm)

The package @cashback/how-it-works-widget at version 99.9.9 is identified as containing malicious code. This is classified as a malicious package within the npm ecosystem. No further technical details or exploitation methods are provided in the source data. There is no information about available patches or fixes.

The presence of malicious code in the specified package version can lead to compromise of systems that install and run this package. The exact impact is not detailed, but malicious npm packages typically pose risks such as unauthorized code execution, data theft, or supply chain compromise. No known active exploitation has been reported.

No patch or remediation guidance is provided. Users should avoid using version 99.9.9 of the @cashback/how-it-works-widget package. Consider removing or replacing this package with a trusted alternative. Monitor official advisories for updates or fixes.