Malicious Package

Overview frontend-metrics-collector-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48280 Malicious code in frontend-metrics-collector-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33df4b3fc95229c6a1af21ef46dd94df8a0c7f647459b6b83dd1a92149afbbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-279 Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @frontend-metrics/hotjar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc044ca69fb03444fe01161e81c79dd2bdd764aa2944339cee044016185990e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-280 Malicious code in @frontend-metrics/hotjar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc044ca69fb03444fe01161e81c79dd2bdd764aa2944339cee044016185990e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...