VYPR
← All malware advisories

npm · Malicious package advisory

Malware

spectral-engine

MAL-2026-2388

Malicious code in spectral-engine (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (6d45c9e6ca6d123deeb7d3bfb326dc818f76fb83f256dca70e650842b7cf7620)
The package spectral-engine was found to contain malicious code.

Compromised versions (1)

  • 2.14.801

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.