npm · Malicious package advisory
Malwaresession-keeper
MAL-2025-192861
Malicious code in session-keeper (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6816e7c69a6752f4aeccba80eac83e7fd815e3388f21b4bfd007ccd6192dbc96) The package session-keeper was found to contain malicious code.
Compromised versions (2)
- 2.4.5
- 2.5.5
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.