VYPR
← All malware advisories

npm · Malicious package advisory

Malware

szsec-infos-report-wh1sper

MAL-2025-191590

Malicious code in szsec-infos-report-wh1sper (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (b009d66a2dccfe829b9259191c35e451f8f0ff75d1041165f2faf49e8f5dbd16)
The package szsec-infos-report-wh1sper was found to contain malicious code.

Compromised versions (4)

  • 2.0.0
  • 2.0.1
  • 2.1.1
  • 3.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.