VYPR

npm · Malicious package advisory

Malware

interview-question

MAL-2024-12183

Malicious code in interview-question (npm)

Details

This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.