VYPR

npm · Malicious package advisory

Malware

bitsight

MAL-2025-190490

Malicious code in bitsight (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899)
The package bitsight was found to contain malicious code.

Compromised versions (2)

  • 1.0.9
  • 1.1.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.