npm · Malicious package advisory
Malware@f5rest/odata-v4-metadata
MAL-2026-1620
Malicious code in @f5rest/odata-v4-metadata (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6b451b98b071a1d7cb27b5486b71503e5611d52b987a3ded3f6ec15b556ce453) The package @f5rest/odata-v4-metadata was found to contain malicious code.
Compromised versions (1)
- 99.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.