1 threat
Most recently published first
The npm package @raux/ra-react-big-calendar version 1.0.0 installs a dependency from a custom domain that executes an information stealer during installation. This malicious code targets sensitive tokens related to npm, git, and CI/CD environments.
Page 1 of 1