VYPR
← All malware advisories

npm · Malicious package advisory

Malware

node-calculator-8f0c

MAL-2025-192835

Malicious code in node-calculator-8f0c (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (facd0f8624c7b280965e202a8be81caec665e04abce5b1bae85b7bec2bf33220)
The package node-calculator-8f0c was found to contain malicious code.

Compromised versions (1)

  • 4.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.