VYPR
← All malware advisories

npm · Malicious package advisory

Malware

company-billing-sdk-bugbounty

MAL-2026-1695

Malicious code in company-billing-sdk-bugbounty (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (d7e0804c0e591fea0c08e9a93b6aaff5803abac7fd387da23dbfb557009397e6)
The package company-billing-sdk-bugbounty was found to contain malicious code.

Compromised versions (1)

  • 99.99.99

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.