npm · Malicious package advisory
Malwareszsec-info-report
MAL-2025-191589
Malicious code in szsec-info-report (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (d6386da123439e1c1588e1432f8a8163e8acbe4363aa983265f6ddee9b9e5c8d) The package szsec-info-report was found to contain malicious code.
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.