VYPR
← All malware advisories

npm · Malicious package advisory

Malware

ccip-starter-kit-hardhat

MAL-2026-2739

Malicious code in ccip-starter-kit-hardhat (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (18950b48cb8b769d2cda9645f7c64f05698aad343186a22e3a84af7662856c39)
The package ccip-starter-kit-hardhat was found to contain malicious code.

Compromised versions (1)

  • 99.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.