VYPR
← All malware advisories

npm · Malicious package advisory

Malware

szsec-infoss-report

MAL-2025-191592

Malicious code in szsec-infoss-report (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (65c0643394ed303f9ad8d679b6b48dc98aa2d93dabfff6c2c5d53fe588bebbe4)
The package szsec-infoss-report was found to contain malicious code.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.