npm · Malicious package advisory
Malware@web-monorepo/fetchers
MAL-2026-1318
Malicious code in @web-monorepo/fetchers (npm)
Details
Package is malware. It exfiltrates data to a suspicious domain via callback.js, triggered by a preinstall script in package.json. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (a3faaa666cb666785670b3a638b1f832d4492f7eb2c999f41f7bb551cde2aa86) The package @web-monorepo/fetchers was found to contain malicious code.