68d ago

Malicious code found in npm package 'kijai' (no CVE). Severity: CRITICAL. Installations are fully compromised — all secrets at risk. Remove immediately, rotate credentials from a clean system, conside

Malicious code found in npm package 'kijai' (no CVE). Severity: CRITICAL.

2 reportsother

Claim audit

No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.

All coverage

Malicious code found in npm package 'kijai' (no CVE). Severity: CRITICAL. Installations are fully compromised — all secrets at risk. Remove immediately, rotate credentials from a clean system, conside

mastodon:infosec-exchangeother68d ago kagi ↗

Malicious code found in npm package 'kijai' (no CVE). Severity: CRITICAL. Installations are fully compromised — all secrets at risk. Remove immediately, rotate credentials from a clean system, consider full rebuild. https:// radar.offseq.com/threat/malici ous-code-in-kijai-npm-b12af57833a7982f # OffSeq # npm # malware # infosec

'caldryn' npm package found with malicious code (CRITICAL). Full system compromise possible — attackers may persist after removal. Rotate all secrets/keys from a secure environment and investigate for

mastodon:infosec-exchangeother68d ago kagi ↗

'caldryn' npm package found with malicious code (CRITICAL). Full system compromise possible — attackers may persist after removal. Rotate all secrets/keys from a secure environment and investigate for persistence. https:// radar.offseq.com/threat/malici ous-code-in-caldryn-npm-b4e3f61925b758b5 # OffSeq # npm # SupplyChain # Infosec