VYPR

npm · Malicious package advisory

Malware

lumberjack

MAL-2024-2642

Malicious code in lumberjack (npm)

Details

False positive caused by problematic ingestion.
---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (8)

  • 2.634.1
  • 4.636.1
  • 1.1.0-3b2
  • 3.635.1
  • 1.633.1
  • 5.637.1
  • 7.639.1
  • 6.638.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.