Skip to content

Simple package.json containing all packages affected by the sh1-hulud worm attack.

Notifications You must be signed in to change notification settings

Bogorg/sha1-hulud-installer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

sha1-hulud-installer

So as you may know, a pretty well known worm called "sha1-hulud" has been causing issues in the npm ecosystem. This repository helps you install ALL the packages affected by the worm in one go. (version are not pined so they might be fixed when you install them)

⚠️ WARNING ⚠️

IT IS NOT RECOMMENDED TO INSTALL THESE PACKAGES.

The "sha1-hulud" worm will try to find credentials on your machine and publish them publicly. This repository is for fun only. Proceed with caution.

🚀 Installation

If you want to have some fun:

npm i

About

Simple package.json containing all packages affected by the sh1-hulud worm attack.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published