npm · Malicious package advisory
Malwarecclr-component-resources
MAL-2026-2413
Malicious code in cclr-component-resources (npm)
Details
Multiple evidences suggest this package is a malware: code obfuscation, dynamic code execution, suspicious domain, and unusual install script. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (61af3265fce06cfbb9bbf20e38d468e136487f69c41f70b0bbb1b331535bdf82) The package cclr-component-resources was found to contain malicious code.