Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-b6a2-ate2-gygh
Aliases:
GHSA-627g-67mh-982c
MAL-2025-47258
|
Malicious code in @operato/input (npm)
This package was compromised by the Shai-Hulud NPM worm.
The malicious payload steals tokens and credentials and publishes
them to GitHub before propogating itself to NPM packages the user owns.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|