VYPR
← All malware advisories

npm · Malicious package advisory

Malware

player-common-composites

MAL-2026-1819

Malicious code in player-common-composites (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (4455f92c445aa0e00604813f2b53943a2ce8b7866175fcb84ab7bcd867f65f70)
The package player-common-composites was found to contain malicious code.

Compromised versions (1)

  • 100.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.