npm · Malicious package advisory
Malware@emerald-react/badge
MAL-2026-1599
Malicious code in @emerald-react/badge (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (aa1fd9db354fb18abad1dbf02e1dd5ceb8235067ff25c71c2b9a5fe274e08594) The package @emerald-react/badge was found to contain malicious code.
Compromised versions (2)
- 999.999.999
- 9999.9999.9999
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.