VYPR
← All malware advisories

npm · Malicious package advisory

Malware

varshade-afc

MAL-2025-192883

Malicious code in varshade-afc (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (8c090ef4ab6892af3d5f4b03ce4af456c7a50f5aa6411bfe1644ce3772a2407c)
The package varshade-afc was found to contain malicious code.

Compromised versions (5)

  • 4.6.14
  • 4.6.15
  • 4.6.16
  • 4.6.17
  • 4.6.18

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.