Overview
All versions of electron-native-notify
contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets.
Remediation
Remove the package from your environment and follow the recommendations by Komodo
Have content suggestions? Visit npmjs.com/support.
Advisory timeline
published
Advisory PublishedJun 6th, 2019reported
Reported by Adam BaldwinJun 5th, 2019