VYPR

npm · Malicious package advisory

Malware

prism-commercial-ui

MAL-2024-984

Malicious code in prism-commercial-ui (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: ossf-package-analysis (022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078)
The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

- The package executes one or more commands associated with malicious behavior.

Compromised versions (13)

  • 100.100.100
  • 100.100.103
  • 100.100.102
  • 100.100.109
  • 100.100.114
  • 100.100.113
  • 100.100.116
  • 100.100.117
  • 100.100.118
  • 100.100.119
  • 100.100.123
  • 100.100.124
  • 100.100.120

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.