1 threat
Most recently published first
The npm package @foryjs/fory contains malicious code that installs a dependency from a custom domain which executes an information stealer during installation. This malware targets sensitive tokens related to npm, git, and CI/CD environments.
Page 1 of 1