Name of the Vulnerable Software and Affected Versions pizza-pasta version 1.0.3

Description The issue concerns malicious code embedded in the install scripts of the affected software. This code creates folders on the system's Desktop and downloads an image from imgur.com. Furthermore, it prints the user's SSH keys to the console. There is no evidence of further compromise.

Recommendations Remove the package from your environment.