VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@hyperion-util/deferred-value

MAL-2023-2

Malicious code in @hyperion-util/deferred-value (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (ee6f14ca7114d9a5fd5096b74a8d6efa41d9df7e63dfcbfa2778ba8ba7d5dc64)
The OpenSSF Package Analysis project identified '@hyperion-util/deferred-value' @ 77.77.79 (npm) as malicious.

It is considered malicious because:
- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 77.77.79

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.