VYPR
← All malware advisories

npm · Malicious package advisory

Malware

ecto-spirit-core

MAL-2026-2356

Malicious code in ecto-spirit-core (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (72d3638a38fd250b18d9b93068dc16f07d03d34e87c361a41069ac57740f2629)
The package ecto-spirit-core was found to contain malicious code.

Compromised versions (4)

  • 1.0.0
  • 2.14.800
  • 3.45.100
  • 3.99.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.