npm · Malicious package advisory
Malwaretnaxmlparserctf
MAL-2025-192466
Malicious code in tnaxmlparserctf (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (f5028d4ab741d3e7b9c3cb92e1275a1d29d1e6cd8157590f7871d02b8b2a5d23) The package tnaxmlparserctf was found to contain malicious code.
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.