VYPR

npm · Malicious package advisory

Malware

tsc-aws-s3

MAL-2024-8009

Malicious code in tsc-aws-s3 (npm)

Details

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell.

Compromised versions (1)

  • 1.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.