If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: kam193 (40c8cae0ed147f872f69edc3d11e0e1c730e0b1c852e7718f6b5b73e646565b5)
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: funcaptcha-ru
Reasons (based on the campaign):
- infostealer