MAL-2026-18282: Malicious code in @greenlake/common-context (npm)

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Remove

   Remove npm/@greenlake/common-context from your environment.

   Remove @greenlake/common-context from any computer where it is installed or running; removing the package may not remove all malicious software resulting from its installation.

2. Operational

   Immediately rotate all secrets and keys stored on any computer that has @greenlake/common-context installed or running, performing the rotation from a different computer.

Event History