VYPR
← All malware advisories

npm · Malicious package advisory

Malware

apex-trading

MAL-2026-3817

Malicious code in apex-trading (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (7cf744353f06f389c92cd15c56bf0ec7d29860e8af7c9618413cf65e455428eb)
The package apex-trading was found to contain malicious code.

## Source: ossf-package-analysis (faf0dac877583a2ef1970711afb8c0555a7bac157bb526e9ebb66fb1393ecb8c)
The OpenSSF Package Analysis project identified 'apex-trading' @ 1.0.4 (npm) as malicious.

It is considered malicious because:

- The package executes one or more commands associated with malicious behavior.

Compromised versions (1)

  • 1.0.4

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.