brass-common

GHSA-fcgr-wqxm-5qqr

Malicious code in brass-common (npm)

Details

**Severity:** Critical

**Affected versions:** `= 99.9.1`

## Source: ossf-package-analysis (ab25e940e6abf9009b89e6480c744db72c4ea0be4d83d095ead744e83055b7cf)
The OpenSSF Package Analysis project identified 'brass-common' @ 99.9.1 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/c5d2d5b8f7085a5c7eba7baf70ad0535ad34ae4c/osv/malicious/npm/brass-common/MAL-2026-17849.json))

**References:**
- https://github.com/ossf/malicious-packages/blob/c5d2d5b8f7085a5c7eba7baf70ad0535ad34ae4c/osv/malicious/npm/brass-common/MAL-2026-17849.json
- https://github.com/ossf/malicious-packages/blob/e5c84efbb59d2fc4cbb4cbd65c7f5134633cd848/osv/malicious/npm/brass-common/MAL-2026-17849.json
- https://www.npmjs.com/package/brass-common/v/99.9.1
- https://github.com/advisories/GHSA-fcgr-wqxm-5qqr

Compromised versions (1)

= 99.9.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.