npm · Malicious package advisory
Malwareddxq_cms_tools
MAL-2025-192733
Malicious code in ddxq_cms_tools (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1c79b5bf164abe664b45e8c5ffcc1a0b7b68214b8b37182338b4c34ca4ae4b3a) The package ddxq_cms_tools was found to contain malicious code.
Compromised versions (1)
- 999.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.