VYPR
← All malware advisories

npm · Malicious package advisory

Malware

nerite-security-audit

MAL-2026-2499

Malicious code in nerite-security-audit (npm)

Details

Collects and exfiltrates sensitive data (env vars, SSH keys, keystores, history) via HTTPS and DNS. Suspicious domain and disabled SSL validation.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (87776a4e480d244c862e76238cd498aa49bd919403dad6de21a85326d6b451ed)
The package nerite-security-audit was found to contain malicious code.