npm · Malicious package advisory
Malwarelayout-utils.js
MAL-2024-7883
Malicious code in layout-utils.js (npm)
Details
The package contains a preinstall hook to execute unhook.js, which has cryptocurrency stealing functionality.
Compromised versions (1)
- 2.3.2
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.