npm · Malicious package advisory
Malwarelogfuse
MAL-2026-7314
Malicious code in logfuse (npm)
Details
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (259fc8b205e41dea32af006c7eaa325f0d1cca2421c668b778b8d2559d8ec900) The package was found to contain malicious code or consuming dependency that contains malicious code
Compromised versions (1)
- 2.1.6
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.