Malicious code in xpc.js (npm)

The package xpc.js was found to contain malicious code...

MAL-2025-39914 Malicious code in xpc.js (npm)

The package xpc.js was found to contain malicious code...

Malicious Package

Overview The package xpc.js contained malicious code. The package ran a postinstall script that executes two.exe files containing Trojan malware. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...