Name of the Vulnerable Software and Affected Versions SoftwareX version 8.9.4

Description The issue concerns malicious code in the preinstall script of the package, which reads the system's SSH keys but does not upload them to a remote server.

Recommendations Remove the package from your environment.