VYPR
← All malware advisories

npm · Malicious package advisory

Malware

cookie-mapper

MAL-2025-192728

Malicious code in cookie-mapper (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (efe3ae0666fc23cea770581c1bc3ca124e00a25f8c4a4794d120a971589ad6d3)
The package cookie-mapper was found to contain malicious code.

Compromised versions (1)

  • 1.1.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.