npm · Malicious package advisory
Malware@ads-core/types
MAL-2025-192700
Malicious code in @ads-core/types (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c87d0a891128398685bb290e3aeec3ffa92b924ed73e196f11216f332a5ba071) The package @ads-core/types was found to contain malicious code.
Compromised versions (2)
- 11.7.7
- 11.7.9
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.