Protet

Protet Intel / npm

Is @webapp-shared/login-vmok malicious?

Yes. Protet confirmed 3 versions of @webapp-shared/login-vmok as malicious

First confirmed on 2026-10-27.

Affected versions

VersionConfirmedProtet record
99.0.12026-10-27PROTET-NPM-2026-127
1.1.02026-10-27PROTET-NPM-2026-126
1.0.02026-10-27PROTET-NPM-2026-125

Other reports

What to do if you installed it

  • Remove the package from every project that uses it, directly or through another dependency.
  • Pin a clean version if you need the package: one that is not listed above and that you have checked yourself, or replace the package. A version missing from this page is not cleared.
  • Check your lockfiles (package-lock.json, yarn.lock, pnpm-lock.yaml) for the affected versions, including as a transitive dependency, and in CI caches.
  • Rotate credentials that were reachable from any machine or build that installed it: npm and GitHub tokens, cloud keys, SSH keys, and secrets in environment variables or CI settings.

Status history

  • 2026-10-27: 1.0.0, 1.1.0, 99.0.1 named by Protet Intel

Want to know if your own builds pull packages like this? Add the Protet GitHub Action.

Think this is wrong? Write to hello@protet.io and we will look at it. Feeds: NDJSON, Atom. How Protet Intel works.