npm · Malicious package advisory
Malwarebitsight
MAL-2025-190490
Malicious code in bitsight (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ee657cb65d10490f2b29546c27133e3049eab717c2b57bda3029643665e32899) The package bitsight was found to contain malicious code.
Compromised versions (2)
- 1.0.9
- 1.1.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.