VYPR
← All malware advisories

npm · Malicious package advisory

Malware

gemini-cli-vscode-ide-companion

MAL-2026-2764

Malicious code in gemini-cli-vscode-ide-companion (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (6a98d87fa5f23a47c4b1ea2c0cecb3e88518985493c1b7f125299ecf8ee6dba1)
The package gemini-cli-vscode-ide-companion was found to contain malicious code.

Compromised versions (1)

  • 99.99.9

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.