VYPR

npm · Malicious package advisory

Malware

internal-lib-vulnerable

MAL-2026-1484

Malicious code in internal-lib-vulnerable (npm)

Details

Malicious package due to data exfiltration, arbitrary code execution during installation via preinstall script, and suspicious hostname.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (b46f6c2b8b094dc4a9864676457c3ea2af565204d854ab4cf1eb27be87aaa878)
The package internal-lib-vulnerable was found to contain malicious code.