VYPR
← All malware advisories

npm · Malicious package advisory

Malware

ldhchukyso

MAL-2025-48698

Malicious code in ldhchukyso (npm)

Details

The package ldhchukyso was found to contain malicious code.

---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (20)

  • 1.250722.11350
  • 1.250722.11354
  • 1.250722.11403
  • 1.250722.11405
  • 1.250722.11414
  • 1.250722.11426
  • 1.250722.11456
  • 1.250722.11459
  • 1.250722.11838
  • 1.250722.11842
  • 1.250722.11849
  • 1.250722.11938
  • 1.250723.11132
  • 1.250723.11154
  • 1.250801.10956
  • 1.250801.11033
  • 1.250801.11446
  • 1.250801.11713
  • 1.250801.11721
  • 1.250819.11113

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.