{"uuid": "a63e308e-45ee-4ea6-87b9-e24a9a237ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MHH3-45V6-6VMH", "type": "seen", "source": "https://t.me/pphm_HackerNews/1718", "content": "\ud83d\udd34 Malware in autotel-tanstack\n\nThe npm package autotel-tanstack was found to contain malware. According to the GitHub Advisory (GHSA-mhh3-45v6-6vmh), any system with this package installed or running should be treated as fully compromised.\\n\\nImmediate action is required: all secrets and keys stored on affected computers must be rotated from a different, uncompromised system. While the package should be removed, there is no guarantee that removal will eliminate all malicious software that may have been installed as a result of the package installation, as the attacker may have gained full control of the system.\\n\\nUsers should assume complete system compromise and take appropriate incident response measures.", "creation_timestamp": "2026-08-22T00:00:27.072956Z"}