Malicious code in husky-ts (npm)

🗓️ 28 Apr 2025 18:55:35Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 2 Views

Malicious code in husky ts npm package compromises computers; rotate secrets remotely and remove the package; cleanup may not be guaranteed.

Vulners

Node

npm husky-tsMatch9.1.7

OR

npm husky-tsMatch9.1.8

OR

npm husky-tsMatch9.1.9

OR

npm husky-tsMatch9.2.0

OR

npm husky-tsMatch9.2.1

OR

npm husky-tsMatch9.2.2

OR

npm husky-tsMatch9.2.3

OR

npm husky-tsMatch9.2.4

OR

npm husky-tsMatch9.2.5

OR

npm husky-tsMatch9.2.6

OR

npm husky-tsMatch9.2.7

OR

npm husky-tsMatch9.2.8

OR

npm husky-tsMatch9.2.9

OR

npm husky-tsMatch9.3.0

OR

npm husky-tsMatch9.3.1

OR

npm husky-tsMatch9.3.2

OR

npm husky-tsMatch9.3.3

OR

npm husky-tsMatch9.3.4

OR

npm husky-tsMatch9.3.5

OR

npm husky-tsMatch9.3.6

OR

npm husky-tsMatch9.3.7

OR

npm husky-tsMatch9.3.8

OR

npm husky-tsMatch9.3.9

Source	Link
github	www.github.com/advisories/GHSA-c92r-9rh5-5f5x
security	www.security.snyk.io/vuln/SNYK-JS-HUSKYTS-9903928
npmjs	www.npmjs.com/package/husky-ts

22 May 2025 14:07Current

6.9Medium risk

Vulners AI Score6.9

husky ts malicious code npm package compromised computer rotate secrets removal may fail