VYPR

npm · Malicious package advisory

Malware

paddle-internal-scripts

MAL-2026-2829

Malicious code in paddle-internal-scripts (npm)

Details

Malicious package due to sensitive data exfiltration via obfuscated `preinstall` script. Few published versions increase suspicion.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (eae655788b800d689464263a26d904ccb45fe4aa65b61422a51325008aff3003)
The package paddle-internal-scripts was found to contain malicious code.