VYPR
← All malware advisories

npm · Malicious package advisory

Malware

ldhemrdhs60152

MAL-2025-48701

Malicious code in ldhemrdhs60152 (npm)

Details

The package ldhemrdhs60152 was found to contain malicious code.

---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (22)

  • 1.250915.11001
  • 1.250915.11350
  • 1.250915.11513
  • 1.250915.11514
  • 1.250915.11830
  • 1.250916.10756
  • 1.250916.11429
  • 1.250917.10801
  • 1.250917.11419
  • 1.250917.11921
  • 1.250918.10827
  • 1.250918.10942
  • 1.250918.11557
  • 1.250918.11814
  • 1.250921.11826
  • 1.250923.10851
  • 1.250923.11033
  • 1.250926.11414
  • 1.251021.10755
  • 1.251021.11516
  • 1.251021.11520
  • 1.251022.11335

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.