VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@hi.editor/core

MAL-2024-12180

Malicious code in @hi.editor/core (npm)

Details

This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon.

Compromised versions (1)

  • 0.2.2-alpha.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.