VYPR
← All malware advisories

npm · Malicious package advisory

Malware

express-security-suite-2024

MAL-2026-1733

Malicious code in express-security-suite-2024 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (59a815ee205469c15d2e85b104bc9d3e945c7f347a3c26f0ef26e3d38746014c)
The package express-security-suite-2024 was found to contain malicious code.

Compromised versions (3)

  • 2.4.1
  • 2.4.2
  • 2.4.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.