If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: kam193 (e5d093c6ce26c2d62ba07cc7fc8e0a5441f9e58bfc62943f6032dad8abefde57)
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2024-07-kiwi-infostealer
Reasons (based on the campaign):
- infostealer