npm · Malicious package advisory
Malwarerenovate-config-doctolib
MAL-2026-2830
Malicious code in renovate-config-doctolib (npm)
Details
Malicious package due to data exfiltration via preinstall script, reading .npmrc, and sending data to a remote server. Few published versions. --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (afc7e33b7c6ea9379f973a56f94e3b8ed59f0bc746733efa7dadba31141d0cd9) The package renovate-config-doctolib was found to contain malicious code.