github_osv/GHSA-p62r-jf56-h429
Malicious Package in evil-package
All versions of `evil-package` contain malicious code. The package uploads the contents of `process.env` to `example.com/log`.
## Recommendation
Remove the package from your environment. Given the host where the information was uploaded to there is no further indication of compromise.
gitlab/npm/evil-package/GMS-2020-253
Malicious Package
All versions of `evil-package` contain malicious code. The package uploads the contents of `process.env` to `example.com/log`. Remove the package from your environment. Given the host where the information was uploaded to there is no further indication of compromise.