Malware in @report-portal/service-ui

A malware incident was identified in the npm package @report-portal/service-ui, published as GitHub Advisory GHSA-4gpj-m85h-j7rq on June 29, 2026.\n\nAccording to the advisory, any computer with this package installed or running should be considered fully compromised. The malware grants outside entities full control of affected systems.\n\nImmediate remediation requires rotating all secrets and keys from a different, uncompromised computer, and removing the package. However, due to the level of system compromise, removal of the package alone may not eliminate all malicious software that was installed.\n\nUsers should assume complete system compromise and take appropriate incident response measures."