VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@shahwarhello/l2geth

MAL-2024-12084

Malicious code in @shahwarhello/l2geth (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701)
The OpenSSF Package Analysis project identified '@shahwarhello/l2geth' @ 0.5.11 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 0.5.11

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.