npm · Malicious package advisory
Malwarefinnairshop
MAL-2026-635
Malicious code in finnairshop (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (79d4d53f987d9f13e00e895d04155d3d28ea228eacb34a2f273667e520c5525f) The package finnairshop was found to contain malicious code.
Compromised versions (1)
- 100.0.10
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.