1 threat
Most recently published first
The npm package 'some-other-config-you-use' was found to contain malicious code that installs a dependency from a custom domain. This dependency executes an information stealer during installation, targeting npm, git, and other CI/CD related tokens.
Page 1 of 1