VYPR

npm · Malicious package advisory

Malware

cclr-component-resources

MAL-2026-2413

Malicious code in cclr-component-resources (npm)

Details

Multiple evidences suggest this package is a malware: code obfuscation, dynamic code execution, suspicious domain, and unusual install script.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (61af3265fce06cfbb9bbf20e38d468e136487f69c41f70b0bbb1b331535bdf82)
The package cclr-component-resources was found to contain malicious code.