Packages / test-renderer / Security

Malicious packageMAL-2024-3109Published 25 Jun 2024

Malicious code in test-renderer (npm)

Compromised versions · test-renderer

  • 28.0.0

Safe

Every other versionincluding the latest, 1.3.1

npm install test-renderer@1.3.1

  1. Not affected

    0.11.0 – 1.3.1

    13 releases, latest

  2. Affected

    28.0.0

    1 release

14 stable releases of test-renderer, oldest to newest.

Is your project affected?

Paste your package.json, or type the range you declare for test-renderer. It is read in your browser and sent nowhere.

What happens

If one of these versions was installed

  1. Treat the machines and CI runners that installed it as compromised.
  2. Rotate the npm, GitHub and cloud tokens they could reach.
  3. Reinstall from a lockfile that pins a version outside the list.

-= Per source details. Do not edit below this line.=-