npm · Malicious package advisory
Malware@lux2/ssr-catalogue-sfcc
MAL-2026-1384
Malicious code in @lux2/ssr-catalogue-sfcc (npm)
Details
Package collects system info, exfiltrates data to a suspicious IP, executes shell commands, and uses pre/postinstall scripts. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (b625e0932d70166d526fb8fa4993c8c448699203e795ad308cfe52cd784b28ff) The package @lux2/ssr-catalogue-sfcc was found to contain malicious code.