VYPR

npm · Malicious package advisory

Malware

icon-reactjs

MAL-2024-1603

Malicious code in icon-reactjs (npm)

Details

This package is considered malicious because it contains code to spam Telegram channels and Whatsapp channels with fake payment confirmations

Compromised versions (1)

  • 9.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.