Malware in @easy-entry/landing-routes

A malicious npm package, @easy-entry/landing-routes, was identified and published on GitHub's advisory database. The package contains malware that provides attackers with full control of any system on which it is installed or executed.\n\nAccording to the advisory, any computer running this package should be considered fully compromised. All secrets, keys, and credentials stored on affected systems must be rotated immediately from a different, uncompromised computer.\n\nWhile the package should be removed, the advisory notes that complete removal of all malicious artifacts cannot be guaranteed, as the attacker may have gained sufficient access to install additional persistence mechanisms.\n\nThe incident was disclosed on 2026-08-13 via GitHub's security advisory system.