VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@3stripes/toolkit

MAL-2026-2708

Malicious code in @3stripes/toolkit (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (4529c8ef3e0953799338bc7e0cc7d6ce4f1d8797b3e0984d362ebd26df6bec1c)
The package @3stripes/toolkit was found to contain malicious code.

Compromised versions (3)

  • 999.0.0
  • 999.0.2
  • 999.0.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.