VYPR

npm · Malicious package advisory

Malware

jsonapptoken

MAL-2025-192808

Malicious code in jsonapptoken (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (40b5e4f69790478de9df8bd2927408bf4ce006c71674885ae54dda73c140d8bb)
The package jsonapptoken was found to contain malicious code.

Compromised versions (1)

  • 2.3.8

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.