npm · Malicious package advisory
Malwarecalculator-40ed
MAL-2025-192719
Malicious code in calculator-40ed (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fcb6983999bd21cebf8cf17bcba24387d1246d9e8d1d54ecc1a23080f4eb1435) The package calculator-40ed was found to contain malicious code.
Compromised versions (2)
- 4.0.0
- 5.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.