1 threat
Most recently published first
The npm package xo-typescript version 1.0.0 contains malicious code that installs a dependency from a custom domain. This dependency acts as an info stealer during installation, targeting sensitive tokens related to npm, git, and CI/CD environments.
Page 1 of 1