npm/load-from-cwd-or-npm: critical 9.8

Malicious Package in load-from-cwd-or-npm

Action: Upgrade load-from-cwd-or-npm to 3.0.4 or later.

npm i load-from-cwd-or-npm@3.0.4

Affected

Fixed versions

Sources

• osv: GHSA-jxf5-7x3j-8j9m
• https://www.npmjs.com/advisories/1082

published 2020-09-03T18:19:14Z · modified 2021-09-30T20:05:11Z · JSON