VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@emerald-react/core

MAL-2026-1604

Malicious code in @emerald-react/core (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (2815333a388587f547d8608d454b6a1d515deb92df2ed79d8c77a7fc4d26e1c5)
The package @emerald-react/core was found to contain malicious code.

Compromised versions (2)

  • 999.999.999
  • 9999.9999.9999

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.