Skip to content
OpenAdvisories

Package · npm

only-test-not-install

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-g9wf-393q-4w38

    Malicious Package in only-test-not-install

    All versions of `only-test-not-install` contain malicious code. The package deletes the folder `~/test` from the system as a postinstall script. ## Recommendation Remove the package from your environment. There are no further signs of compromise.

    only-test-not-install npm