npm · Malicious package advisory
Malwaretest-test-121333
MAL-2025-586
Malicious code in test-test-121333 (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: ossf-package-analysis (ed3e1b0420eb26040693b16a06bc6803942f127119fd8cf4082268891ea0db5f) The OpenSSF Package Analysis project identified 'test-test-121333' @ 1.1.2 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (1)
- 1.1.2
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.