VYPR
← All malware advisories

npm · Malicious package advisory

Malware

rules-deployer

MAL-2026-3

Malicious code in rules-deployer (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (849a58d27ed0090633a72330c705b5849146aa1493961574c6a11dc758e28e34)
The package rules-deployer was found to contain malicious code.

## Source: ossf-package-analysis (c4db6440dc23c5dddffabd81ff195cbea3783192fe2d62d25402ac3c8f1f4699)
The OpenSSF Package Analysis project identified 'rules-deployer' @ 0.0.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 0.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.