VYPR
← All malware advisories

npm · Malicious package advisory

Malware

noon-contracts

MAL-2026-3420

Malicious code in noon-contracts (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (5e2a4c1ac3896b7769b47ab6659bf7b0d49f229963c910d0c9b9be11c5291c12)
The package noon-contracts was found to contain malicious code.

## Source: ossf-package-analysis (b5f6c654d7fccfbe2c9c80d226319a191f30a61f37e36a2691ded47aafab85ef)
The OpenSSF Package Analysis project identified 'noon-contracts' @ 1.0.0 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

  • 1.0.0

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.