VYPR
← All malware advisories

npm · Malicious package advisory

Malware

seek-pass

MAL-2026-3330

Malicious code in seek-pass (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (df5ea10e9459dff09eeff2b45d93b1ffa2458c8b38b7625850b5f2564e3d000f)
The package seek-pass was found to contain malicious code.

## Source: ossf-package-analysis (e1687eccaa8a2cfc6060797283701c63e515384f1285b269045fce17b11fff21)
The OpenSSF Package Analysis project identified 'seek-pass' @ 100.3.0 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 100.3.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.