VYPR
← All malware advisories

npm · Malicious package advisory

Malware

collect-rangers

MAL-2026-2748

Malicious code in collect-rangers (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (2032d1a91a275e0d014941f9efbffde4e402db99abfb381c36335c75f7f78902)
The package collect-rangers was found to contain malicious code.

Compromised versions (1)

  • 9999.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.