npm · Malicious package advisory
Malwarecdnjavacss
MAL-2026-2336
Malicious code in cdnjavacss (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1fb57ffd656f0a20fd4da4f7364cf96e67191700bda0682462b0ea9c68de1bb1) The package cdnjavacss was found to contain malicious code.
Compromised versions (1)
- 19.0.4
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.