npm · Malicious package advisory
Malware@cloudsop/hmoment
MAL-2026-2408
Malicious code in @cloudsop/hmoment (npm)
Details
Malicious package due to suspicious install script attempting to require the current directory and low project popularity. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (ad95ef51ef99f49ca08b99a81d6a18ecb75dafb1dad2afc2bca687f221ef95dc) The package @cloudsop/hmoment was found to contain malicious code.