Skip to content
OpenAdvisories

Package · npm

malicious-do-not-install

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-6879-xr95-5gf4

    Malicious Package in malicious-do-not-install

    All versions of `malicious-do-not-install` contain malicious code. The package copies the contents of `/etc/passwd` and `/etc/shadow` to files in the local `/tmp/` folder. ## Recommendation Remove the package from your environment and rotate affected credenti…

    malicious-do-not-install npm