Malicious code in fq-ui (npm)

🗓️ 25 Jun 2024 12:43:36Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 1 Views

Malicious code in fq-ui npm package may fully compromise devices, rotate secrets and remove package.

Vulners

Node

npm fq-uiMatch2.542.1

OR

npm fq-uiMatch1.541.1

OR

npm fq-uiMatch1.0.0-dev

OR

npm fq-uiMatch9.650.2

OR

npm fq-uiMatch1.0.2-dev

OR

npm fq-uiMatch4.645.2

OR

npm fq-uiMatch5.646.2

OR

npm fq-uiMatch3.543.1

OR

npm fq-uiMatch1.642.2

OR

npm fq-uiMatch6.647.2

OR

npm fq-uiMatch7.648.2

OR

npm fq-uiMatch2.643.2

OR

npm fq-uiMatch8.649.2

OR

npm fq-uiMatch5.545.1

OR

npm fq-uiMatch4.544.1

OR

npm fq-uiMatch3.644.2

OR

npm fq-uiMatch22.0.0

Source	Link
github	www.github.com/advisories/GHSA-8gfp-4jvf-4x9h
security	www.security.snyk.io/vuln/SNYK-JS-FQUI-13764166
npmjs	www.npmjs.com/package/fq-ui
koi	www.koi.ai/blog/phantomraven-npm-malware-hidden-in-invisible-dependencies

02 Dec 2025 09:12Current

6.9Medium risk

Vulners AI Score6.9

malicious code fq ui node package manager rotate secrets remove package