The hook
Checking Red Hat npm package versions for the worm campaign is one of the modules FixVibe runs during a scan.
How it works
Mechanics write-up forthcoming.
The blast radius
Impact varies by case.
// what fixvibe checks
What FixVibe checks
FixVibe repo scans look for high-confidence security patterns and dependency risk in source context. Reports identify the affected area and recommended fix. For check-specific questions about exact detection heuristics, active payload details, or source-code rule patterns, contact support@fixvibe.app.
Ironclad defenses
Defense guidance forthcoming.