Malware in revenuecat

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2025-199263

Malicious code in revenuecat npm...

MAL-2025-191418 Malicious code in revenuecat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481d03098b9cf6dff3275105a5ca196ad47829ad3ead717057f00365a619c77d The package revenuecat was found to contain malicious code. Source: ghsa-malware ef3e36bfc07bd3c7c776ac84129b8838cd409b0c4f0c0851d5615bbaf36ab797 Any...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in revenuecat-mcp-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f411f3e2786cc80d5d85bf7feb0c72705b6e5c95af9c002b0f716e0b15ea83 The package revenuecat-mcp-extension was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49378 Malicious code in revenuecat-mcp-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f411f3e2786cc80d5d85bf7feb0c72705b6e5c95af9c002b0f716e0b15ea83 The package revenuecat-mcp-extension was found to contain malicious code. Source: ossf-package-analysis...

EUVD-2025-38183

Malicious code in revenuecat-mcp-extension npm...

Malicious Package

Overview com.revenuecat.purchases-unity is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...

MAL-2025-46988 Malicious code in com.revenuecat.purchases-unity (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9409a3b3ea8cbed10c1c8e9ee79e134487117b36b0280c2190576e79e6387b60 Any computer that has this package installed or running should be considered...

Malicious code in com.revenuecat.purchases-unity (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9409a3b3ea8cbed10c1c8e9ee79e134487117b36b0280c2190576e79e6387b60 Any computer that has this package installed or running should be considered...