commerce-utils

MAL-2026-2497

Malicious code in commerce-utils (npm)

Details

Malicious package due to data exfiltration to a suspicious host, combined with arbitrary code execution during preinstall.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (3bb3d6d3a8a8898abe7e371e54753d5902a5062151888ccff6c656f5edac6ba6)
The package commerce-utils was found to contain malicious code.