Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-6879-xr95-5gf4

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6879-xr95-5gf4

Malicious Package in malicious-do-not-install All versions of `malicious-do-not-install` contain malicious code. The package copies the contents of `/etc/passwd` and `/etc/shadow` to files in the local `/tmp/` folder. ## Recommendation Remove the package from your environment and rotate affected credentials.

gitlab/npm/malicious-do-not-install/GMS-2020-364

Malicious Package All versions of `malicious-do-not-install` contain malicious code. The package copies the contents of `/etc/passwd` and `/etc/shadow` to files in the local `/tmp/` folder. Remove the package from your environment and rotate affected credentials.