VYPR

npm · Malicious package advisory

Malware

oc-aa-module-client

MAL-2026-2415

Malicious code in oc-aa-module-client (npm)

Details

Multiple pieces of evidence suggest malicious intent: hex obfuscation, dynamic code execution, suspicious email, and install script executing index.js.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (0ff9a96329ad67bbc8f97ec7686f7f6a8f1b94bb76be3f8f48671cafde13fc4c)
The package oc-aa-module-client was found to contain malicious code.