VYPR
← All malware advisories

npm · Malicious package advisory

Malware

coinbase-desktop-sdk

MAL-2026-1693

Malicious code in coinbase-desktop-sdk (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (5acc3fd93737f0c91c26014273ad41b78393a11a3c9377a337636ce2ba558477)
The package coinbase-desktop-sdk was found to contain malicious code.

Compromised versions (5)

  • 1.5.14
  • 1.5.15
  • 1.5.16
  • 1.5.17
  • 1.5.19

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.