VYPR

npm · Malicious package advisory

Malware

trello-enterprises

MAL-2026-1486

Malicious code in trello-enterprises (npm)

Details

The package is malicious due to a postinstall script executing a file that exfiltrates sensitive information to a remote server.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (9a327d3918cfde33c4405296d7b5e2644bf1435d6532be30af21d41135d529ef)
The package trello-enterprises was found to contain malicious code.