If this package is installed
Remove it, treat the machine (or CI runner) as compromised, and rotate every secret, token and key it could access — from a different, clean machine.
Details
Source: kam193 (96ca6d620b3741a6c0d3df99b09223e35e63a15cf8dcc5935d28785ad66361b0)
---
Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.
Campaign: 2024-07-adfboba
Reasons (based on the campaign):