npm · Malicious package advisory
Malwarepaddle-internal-scripts
MAL-2026-2829
Malicious code in paddle-internal-scripts (npm)
Details
Malicious package due to sensitive data exfiltration via obfuscated `preinstall` script. Few published versions increase suspicion. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (eae655788b800d689464263a26d904ccb45fe4aa65b61422a51325008aff3003) The package paddle-internal-scripts was found to contain malicious code.