VYPR
← All malware advisories

npm · Malicious package advisory

Malware

ref-selector

MAL-2026-1840

Malicious code in ref-selector (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (0eccb0ad0032090e5db9e517390d5f67fec7413858f4422498155a54ed1260ce)
The package ref-selector was found to contain malicious code.

Compromised versions (1)

  • 100.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.