npm · Malicious package advisory
Malwaretsdoc-build-rig
MAL-2026-2979
Malicious code in tsdoc-build-rig (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (fa9483578294aa1f05417210a36c0840de9fe1104aa1c36c6cad6f0ac4fe4760) The package tsdoc-build-rig was found to contain malicious code. ## Source: ossf-package-analysis (d968b752858b945ac204e28c01591fabd101dc13fb76fe3bd083ae1143a4962f) The OpenSSF Package Analysis project identified 'tsdoc-build-rig' @ 99.12.9 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.
Compromised versions (1)
- 99.12.9
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.