npm · Malicious package advisory
Malwareldhemrdhs92004
MAL-2025-48706
Malicious code in ldhemrdhs92004 (npm)
Details
The package ldhemrdhs92004 was found to contain malicious code. --- _-= Per source details. Do not edit below this line.=-_
Compromised versions (8)
- 1.250916.10837
- 1.250917.11921
- 1.250920.11536
- 1.250920.11537
- 1.250921.11826
- 1.250923.10904
- 1.250923.11036
- 1.250926.11417
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.