npm · Malicious package advisory
Malwarees1int-configer
MAL-2026-1727
Malicious code in es1int-configer (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (c5e6a102d4a76da1cac7b4f5ad35f5178e00170cbe76b1ddbc2f56fedde201de) The package es1int-configer was found to contain malicious code.
Compromised versions (2)
- 3.3.0
- 3.3.1
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.