VYPR
← All malware advisories

npm · Malicious package advisory

Malware

initial-path32

MAL-2026-1749

Malicious code in initial-path32 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (71e77f0ff5d620fe6b79ce6c0ba799edb94b5ec3b8eea98b7da903d2f70e9c86)
The package initial-path32 was found to contain malicious code.

Compromised versions (1)

  • 3.3.9

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.