Malicious code in fabric-grachics (npm)

The package 'fabric-grachics' version 2.1.7 on the npm ecosystem has been identified as containing malicious code. This is classified as a malicious package incident rather than a typical vulnerability. There is no detailed technical information or vendor advisory available to describe the nature of the malicious code or its impact. No patch or fix information is provided, and no active exploitation has been reported.

The presence of malicious code in the package can lead to compromise of systems that install and run this specific version (2.1.7) of 'fabric-grachics'. The exact impact is not detailed, but malicious packages typically risk unauthorized code execution, data theft, or system compromise. No known active exploitation has been reported.

No official patch or remediation guidance is available. Users should avoid using version 2.1.7 of 'fabric-grachics'. It is recommended to remove this version from projects and replace it with a trusted alternative or a verified safe version if available. Monitor official advisories for updates.