VYPR
← All malware advisories

npm · Malicious package advisory

Malware

json-mapping-fetch

MAL-2026-2367

Malicious code in json-mapping-fetch (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (45649188d792a4c0d12add7ece8a5f8bd1f35ea2478d963b75238249cc788de3)
The package json-mapping-fetch was found to contain malicious code.

Compromised versions (1)

  • 2.4.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.