VYPR

npm · Malicious package advisory

Malware

@schedaero/net-common

MAL-2026-1229

Malicious code in @schedaero/net-common (npm)

Details

Malicious package due to suspicious preinstall script, data exfiltration via User-Agent, process termination, and a suspicious URL.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (2e5e87e24ed2574837f59c3fb4cf21d0c9677b4d5e729f0835fc90a9bf427c4c)
The package @schedaero/net-common was found to contain malicious code.