Potential supply chain compromise #41

Open

opened

NPM has versions 1.2.1, 1.2.2, 0.11.1, and 0.11.2 all appear to have added binding.gyp executing index.js on install. Index.js appears to be malicious.

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests