npm · Malicious package advisory
Malware@immuta/feature-flags-core
MAL-2026-1381
Malicious code in @immuta/feature-flags-core (npm)
Details
Malicious package due to data exfiltration to a hardcoded IP, command execution --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (5faa2e2b3afed77ff19adb0b231de0a6ecdd10f713507e643a56d3d5503b1e47) The package @immuta/feature-flags-core was found to contain malicious code.