VYPR
← All malware advisories

npm · Malicious package advisory

Malware

collabs-merchants

MAL-2026-1694

Malicious code in collabs-merchants (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (c742b9fe98460e2c9a2ab91847c6ff1f1b753187de7d52c7d160dd99021b6e58)
The package collabs-merchants was found to contain malicious code.

Compromised versions (3)

  • 99.9.12
  • 99.9.13
  • 99.9.14

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.