VYPR
← All malware advisories

npm · Malicious package advisory

Malware

bootstrap-setflexcolor

MAL-2025-192718

Malicious code in bootstrap-setflexcolor (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (90557c8cf061fb243537b42df1c27af4fc410d5a3bbeb6df2346720058fa9d4f)
The package bootstrap-setflexcolor was found to contain malicious code.

Compromised versions (1)

  • 1.9.15

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.