VYPR
← All malware advisories

npm · Malicious package advisory

Malware

vision-chart

MAL-2023-8039

Malicious code in vision-chart (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: checkmarx (22b046ac73ecbc50209ffe4bb757a9736adafeb2a51ad9123c0d8a3902374246)
Malicious packages campaign since 2021 targeting developers, steals source code and secrets

Compromised versions (11)

  • 1.2.11
  • 1.1.11
  • 2.0.11
  • 0.1.11
  • 1.3.11
  • 3.0.11
  • 3.9.11
  • 2.9.11
  • 0.9.11
  • 1.4.11
  • 1.0.11

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.