VYPR
← All malware advisories

npm · Malicious package advisory

Malware

@fuego-tools/analytics

MAL-2026-2713

Malicious code in @fuego-tools/analytics (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (f8b13e975286ea5f50f12e176e5b9399e209b890fc03e8d5f890f02d83a52489)
The package @fuego-tools/analytics was found to contain malicious code.

Compromised versions (1)

  • 2.1.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.