VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@ra-ide/udt-frontend

MAL-2025-190598

Malicious code in @ra-ide/udt-frontend (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (43e7622a4fb5f78043c8f52ad78fb036d26fa8ae041f8d2d21f82d4620894e14)
The package @ra-ide/udt-frontend was found to contain malicious code.

## Source: ossf-package-analysis (06a45948acd3329d36110e3003adc89e9ce0166c9c468a10c66fca181c535b3e)
The OpenSSF Package Analysis project identified '@ra-ide/udt-frontend' @ 141.3.1 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 141.3.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.