VYPR

npm · Malicious package advisory

Malware

officebrowserfeedback

MAL-2024-12172

Malicious code in officebrowserfeedback (npm)

Details

This package exfils sensitive data to a attacker-controlled domain via index.js.

Compromised versions (1)

  • 1.4.12

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.