Malware in screenshot-desktop
What to do
- Check every lockfile and build cache for the affected versions below and remove them.
- Rotate any secrets (tokens, keys, cloud credentials) that were available to machines that installed them.
- Pin to a known-good version and reinstall from a clean lockfile.
Malicious versions
screenshot-desktop
- = 1.16.0
Check your project: npm ls screenshot-desktop --all
What changed
Published in the GitHub Advisory Database as critical.