Malicious code in gontawesome (npm)

This threat involves the presence of malicious code within specific versions of the gontawesome package distributed via npm. The affected versions are 1.1.1, 1.1.4, and 8.7.6. The advisory does not provide further technical details, exploit methods, or impact specifics beyond the identification of the package as malicious.

The presence of malicious code in these package versions implies a risk of compromise or unauthorized actions when these versions are used. However, without detailed technical or exploit information, the exact impact cannot be determined from the provided data.

Patch status is not yet confirmed — check the vendor advisory or official npm security advisories for current remediation guidance. Until a fix or removal guidance is available, avoid using the affected versions 1.1.1, 1.1.4, and 8.7.6 of gontawesome. Consider replacing the package with a trusted alternative or verifying the integrity of the package source.