VYPR
← All malware advisories

npm · Malicious package advisory

Malware

node-calculator-290c

MAL-2025-192827

Malicious code in node-calculator-290c (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (5d2f84bcd9f0c2c81711d9b1a6cc28fb3eb275c8812b12f04113305c92798ae4)
The package node-calculator-290c was found to contain malicious code.

Compromised versions (2)

  • 7.1.1
  • 8.1.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.