npm · Malicious package advisory
Malwarehow-to-get-free-spins-in-coin-master-2023-dkfkf
GHSA-cx52-q4cm-mmfw
Malicious code in how-to-get-free-spins-in-coin-master-2023-dkfkf (npm)
Details
**Severity:** Critical **Affected versions:** `> 0` The package how-to-get-free-spins-in-coin-master-2023-dkfkf was found to contain malicious code. --- Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/how-to-get-free-spins-in-coin-master-2023-dkfkf/MAL-2025-44632.json)) **References:** - https://github.com/ossf/malicious-packages/blob/05b419acdcdd6e02782971da765f32a22a1aed8e/osv/malicious/npm/how-to-get-free-spins-in-coin-master-2023-dkfkf/MAL-2025-44632.json - https://github.com/advisories/GHSA-cx52-q4cm-mmfw
Compromised versions (1)
- > 0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.