Malicious npm package found: dowload_ebok_sombras_de_identidad_nacidos_de_la_bruma_mistbor_by_brandon_sanders
KROMSE explanation
The npm package dowload_ebok_sombras_de_identidad_nacidos_de_la_bruma_mistbor_by_brandon_sanders was published to attack whoever installs it.
Yes: the package itself is the attack. Installing it is enough.
Any project or machine where this package was installed, directly or as a dependency.
- Remove the package from your project and lock files.
- Change the passwords, tokens and keys used on machines where it was installed.