npm · Malicious package advisory
Malwareinternal-lib-vulnerable
MAL-2026-1484
Malicious code in internal-lib-vulnerable (npm)
Details
Malicious package due to data exfiltration, arbitrary code execution during installation via preinstall script, and suspicious hostname. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (b46f6c2b8b094dc4a9864676457c3ea2af565204d854ab4cf1eb27be87aaa878) The package internal-lib-vulnerable was found to contain malicious code.