npm · Malicious package advisory
Malwareotomi-console
MAL-2026-2788
Malicious code in otomi-console (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (1f9238b0645d7de5b5df1ba2ccc3d6a6d2d476b29cfd3a7eaa583ec4c32c7839) The package otomi-console was found to contain malicious code.
Compromised versions (1)
- 9.9.9
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.