VYPR

npm · Malicious package advisory

Malware

browser-gaming-client

MAL-2026-1578

Malicious code in browser-gaming-client (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (6192938bfd5be1cecf133866c6e290b57293bede88ca5b11d8af9aab40bae003)
The package browser-gaming-client was found to contain malicious code.

## Source: ossf-package-analysis (7e9007604eefaa8b83b60ceee0ec3b2c45b2c0c666016fca81dc74eb94c21bcb)
The OpenSSF Package Analysis project identified 'browser-gaming-client' @ 99.0.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (4)

  • 99.0.0
  • 99.0.3
  • 99.0.4
  • 99.0.5

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.