VYPR

npm · Malicious package advisory

Malware

hwieiur

MAL-2024-8728

Malicious code in hwieiur (npm)

Details

The package contains obfuscated code to load content from a suspicious external domain in the user's browser

Compromised versions (1)

  • 11.37.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.