VYPR
← All malware advisories

npm · Malicious package advisory

Malware

assert-json-not

MAL-2025-192711

Malicious code in assert-json-not (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (ad56c36eacf8881039723de4379e14983280b611dba15585274909b1a3c1b326)
The package assert-json-not was found to contain malicious code.

Compromised versions (1)

  • 2.3.5

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.