Malicious code in sitefinitywebapp (npm)

The sitefinitywebapp package on the npm ecosystem at version 99.0.0 has been identified as containing malicious code. This is classified as a malicious package incident rather than a typical vulnerability. No further technical details or exploitation methods are provided in the source data.

The presence of malicious code in the npm package can lead to compromise of systems that install or use this specific version of sitefinitywebapp. However, no active exploitation or specific impact scenarios are documented in the provided data.

Patch status is not yet confirmed — check the vendor advisory or npm security advisories for current remediation guidance. Users should avoid using version 99.0.0 of sitefinitywebapp until further information or a clean version is available.