VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@wdpx/themes

MAL-2024-1641

Malicious code in @wdpx/themes (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (027f3f6ecca8b2d2bd6a4d8c6b358eb1ea8ea1f094cfe3d2606095b6b17d822f)
The OpenSSF Package Analysis project identified '@wdpx/themes' @ 3.0.2 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 3.0.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.