VYPR
← All malware advisories

npm · Malicious package advisory

Malware

path-to-regexp-updated

MAL-2026-1808

Malicious code in path-to-regexp-updated (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (d4f886299ed0f104de3331f447c127332d6de7b5d3bff5954553bb5c50099dfc)
The package path-to-regexp-updated was found to contain malicious code.

Compromised versions (2)

  • 99.99.1
  • 99.99.2

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.