MAL-2026-91 Malicious code in okta-auth-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2189b5df6091ef38c2619c0ed24b8814459b769da6b646901bb0d1987a440 The package okta-auth-js was found to contain malicious code. Source: ghsa-malware 65d7548ce9f766315a32892d8f9588740b8fab7cc50443598ea65e8e0ce9b2ab A...

EUVD-2026-1113

Malicious code in okta-auth-js npm...

Malware in okta-auth-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview okta-auth-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

org.webjars.npm:okta__okta-auth-js (>=7.0.2, <=7.4.3) potentially affected by CVE-2024-21534 via org.webjars.npm:jsonpath-plus (6.0.1)

org.webjars.npm:jsonpath-plus MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsonpath-plus and may be impacted: - org.webjars.npm:oktaokta-auth-js =7.0.2, =7.4.3 Source cves: CVE-2024-21534 Source advisory:...

org.webjars.npm:okta__okta-auth-js (>=7.0.2, <=7.4.3) potentially affected by CVE-2024-21534 via org.webjars.npm:jsonpath-plus (6.0.1)

org.webjars.npm:jsonpath-plus MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:jsonpath-plus and may be impacted: - org.webjars.npm:oktaokta-auth-js =7.0.2, =7.4.3 Source cves: CVE-2024-21534 Source advisory:...