VYPR
← All malware advisories

npm · Malicious package advisory

Malware

binance-price

MAL-2023-1549

Malicious code in binance-price (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (421081a4101ed61796fd72e7dec62cafa098a1d01934298a2ef82ef7187c4934)
Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering tactics

Compromised versions (3)

  • 1.6.1
  • 1.5.8
  • 1.5.7

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.