VYPR
← All malware advisories

npm · Malicious package advisory

Malware

24712-pl5004

MAL-2026-3361

Malicious code in 24712-pl5004 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (3d79bb37b62b8d47ca459db0858a93ffb3c35e3791423c11a0853fb4ab17388e)
The package 24712-pl5004 was found to contain malicious code.

## Source: ossf-package-analysis (d795dd6b3bd9d223cd7fe9b27d62dfbf0341cfc6466201180d288d846aff5cb9)
The OpenSSF Package Analysis project identified '24712-pl5004' @ 0.0.1 (npm) as malicious.

It is considered malicious because:

- The package communicates with a domain associated with malicious activity.

Compromised versions (1)

  • 0.0.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.