github_osv/GHSA-6879-xr95-5gf4
Malicious Package in malicious-do-not-install
All versions of `malicious-do-not-install` contain malicious code. The package copies the contents of `/etc/passwd` and `/etc/shadow` to files in the local `/tmp/` folder.
## Recommendation
Remove the package from your environment and rotate affected credentials.
gitlab/npm/malicious-do-not-install/GMS-2020-364
Malicious Package
All versions of `malicious-do-not-install` contain malicious code. The package copies the contents of `/etc/passwd` and `/etc/shadow` to files in the local `/tmp/` folder. Remove the package from your environment and rotate affected credentials.