npm · Malicious package advisory
Malwarelibxmljs2as
MAL-2026-1779
Malicious code in libxmljs2as (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (de41fa76c6b222189c7c40b6cbe21b3c9b05c3223356e88362a0c6f621e84dd6) The package libxmljs2as was found to contain malicious code.
Compromised versions (1)
- 1.0.0
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.