npm · Malicious package advisory
Malware@at-point/valiant-widgets-v2
MAL-2026-1586
Malicious code in @at-point/valiant-widgets-v2 (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (87532b33037ce0d72b75f2ca654c5b66bf97048b3d1226ca6bdb396af6670c4a) The package @at-point/valiant-widgets-v2 was found to contain malicious code.
Compromised versions (2)
- 99.99.9
- 99.99.99
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.