Skip to main content
VulnerabilityPublished Updated

rhynpm (npm) · Malicious Code

Affects rhynpmSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 12 Sep 2026, 14:33 UTC

What to do

Affected software

ProductAffectedFixed in
npmrhynpmAffected
  • >=0.0.1-0
  • =1.0.0
  • =1.0.1
  • =1.0.2
  • =1.0.3
  • =1.0.4
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix or removal is confirmed, users should avoid using the 'rhynpm' package and consider removing it from their projects.

Description

The npm package 'rhynpm' was found to contain malicious code. Multiple versions of the package, including 1.0.0 through 1.0.4 and versions starting from 0.0.1-0, are affected. No official patch or remediation guidance is provided in the available data. There is no evidence of known exploits in the wild at this time.

References

Community reviews

Loading reviews…