npm malware
@npm_malware
📣 We tweet malicious packages detected on npm in real-time. 🚨 Not affiliated with @npmjs or @github. 🛡 Powered by the @SocketSecurity threat feed. ✨
ID: 1564754411540316161
https://socket.dev 30-08-2022 23:18:46
6,6K Tweet
1,1K Followers
11 Following
⚠️ New threat detected: [email protected] ⚠️ The code is a clear security threat exhibiting malicious behavior: it exfiltrates sensitive environment variables to a suspicious external server and executes arbitrary code received from that serv... socket.dev/npm/package/ta…