VYPR

npm · Malicious package advisory

Malware

@twork-mw/display-mode

MAL-2025-784

Malicious code in @twork-mw/display-mode (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

Compromised versions (50)

  • 0.1.99
  • 0.2.99
  • 0.3.99
  • 0.4.99
  • 0.5.99
  • 0.6.99
  • 0.7.99
  • 0.8.99
  • 0.9.99
  • 0.10.99
  • 0.11.99
  • 0.12.99
  • 0.13.99
  • 0.14.99
  • 0.15.99
  • 0.16.99
  • 0.17.99
  • 0.18.99
  • 0.19.99
  • 0.20.99
  • 0.21.99
  • 0.22.99
  • 0.23.99
  • 0.24.99
  • 0.25.99
  • 1.99.99
  • 2.99.99
  • 3.99.99
  • 4.99.99
  • 5.99.99
  • 6.99.99
  • 7.99.99
  • 8.99.99
  • 9.99.99
  • 10.99.99
  • 11.99.99
  • 12.99.99
  • 13.99.99
  • 14.99.99
  • 15.99.99
  • 16.99.99
  • 17.99.99
  • 18.99.99
  • 19.99.99
  • 20.99.99
  • 21.99.99
  • 22.99.99
  • 23.99.99
  • 24.99.99
  • 25.99.99

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.