npm · Malicious package advisory
Malwareuser-journey-tracker
MAL-2025-3424
Malicious code in user-journey-tracker (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_
Compromised versions (17)
- 1.0.0
- 1.9.9
- 2.9.9
- 3.9.9
- 4.9.9
- 5.9.9
- 6.9.9
- 7.9.9
- 8.9.9
- 9.9.9
- 10.9.9
- 11.9.9
- 12.9.9
- 13.9.9
- 14.9.9
- 15.9.9
- 16.9.9
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.