VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@okcoin-dev/blade

MAL-2023-1096

Malicious code in @okcoin-dev/blade (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (71645eda002c3a56f041a1c91f7072a640455be1d5bed1cc7cf67fd4c1cff44b)
The OpenSSF Package Analysis project identified '@okcoin-dev/blade' @ 1.11.33 (npm) as malicious.

It is considered malicious because:
- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

  • 1.11.33

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.