VYPR

npm · Malicious package advisory

Malware

@genoma-ui/components

MAL-2026-2823

Malicious code in @genoma-ui/components (npm)

Details

Malicious package detected. It uses pre/post install scripts to download/execute code and exfiltrate user data via curl from a hardcoded IP.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (a5fb9acd5bf2a73c82be9ac19b7c0cad285cfea2a4b6ff69655f61e7e4a0c26c)
The package @genoma-ui/components was found to contain malicious code.