github_osv/GHSA-8hmr-w35f-3qgj
Malicious Package in harmlesspackage
Version 0.0.1 of `harmlesspackage` contains malicious code as a postinstall script. The package printed a message to the console and performed a GET request to a remote server.
## Recommendation
Remove the package from your environment. There is no evidence of further compromise.
gitlab/npm/harmlesspackage/GMS-2020-284
Malicious Package
of `harmlesspackage` contains malicious code as a postinstall script. The package printed a message to the console and performed a GET request to a remote server. Remove the package from your environment. There is no evidence of further compromise.