VYPR
← All malware advisories

npm · Malicious package advisory

Malware

env-express

MAL-2026-2361

Malicious code in env-express (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (641ecb34e7cfa3af77893add29d18b3c9c1e2b95012ff76c775a7bd8ca97ea4b)
The package env-express was found to contain malicious code.

Compromised versions (1)

  • 2.5.5

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.