VYPR
← All malware advisories

npm · Malicious package advisory

Malware

noblox.js-servers

MAL-2024-43

Malicious code in noblox.js-servers (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (be4b415c87e9f3008a2d199fcc914e49a3a8a047e4bdfcaa493a9364d54accf7)
The OpenSSF Package Analysis project identified 'noblox.js-servers' @ 4.15.8 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (4)

  • 4.15.8
  • 4.15.7
  • 4.16.2
  • 4.16.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.