VYPR

npm · Malicious package advisory

Malware

ua.unitedforbusiness.frontend

MAL-2025-752

Malicious code in ua.unitedforbusiness.frontend (npm)

Details

The package communicates with a domain associated with malicious activity.

Compromised versions (3)

  • 9.9.9
  • 9.9.11
  • 9.9.12

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.