VYPR
← All malware advisories

npm · Malicious package advisory

Malware

coingecko-price

MAL-2023-1551

Malicious code in coingecko-price (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (06ba52961b5d886349fdb5a7c3e6362cedaaa64cb5857d5645d7360a68d133d1)
Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering tactics

Compromised versions (2)

  • 3.2.12
  • 3.2.13

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.