Malicious npm package found: le_guide_incroyablement_facile_de_l_iphone_14_et_d_by_scott_la_counte_gaztr

KROMSE explanation

The npm package le_guide_incroyablement_facile_de_l_iphone_14_et_d_by_scott_la_counte_gaztr was published to attack whoever installs it.

Yes: the package itself is the attack. Installing it is enough.

Any project or machine where this package was installed, directly or as a dependency.

  • Remove the package from your project and lock files.
  • Change the passwords, tokens and keys used on machines where it was installed.
KROMSELive threat centreSign inAdd your repository or website to see if it impacts youAdd repo or website

Loading the story…