VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@clearing/noway

MAL-2023-1078

Malicious code in @clearing/noway (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364)
The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 (npm) as malicious.

It is considered malicious because:
- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 10.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.