npm · Malicious package advisory
Malwareicon-reactjs
MAL-2024-1603
Malicious code in icon-reactjs (npm)
Details
This package is considered malicious because it contains code to spam Telegram channels and Whatsapp channels with fake payment confirmations
Compromised versions (1)
- 9.0.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.