VYPR
← All malware advisories

npm · Malicious package advisory

Malware

btc-api-node

MAL-2023-1550

Malicious code in btc-api-node (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (f59f6e40fe31bd4d5d4aa5da8bc0d032e2bbff9166104dc707c2987f953a5d93)
Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering tactics

Compromised versions (1)

  • 1.12.7

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.