VYPR

npm · Malicious package advisory

Malware

renovate-config-doctolib

MAL-2026-2830

Malicious code in renovate-config-doctolib (npm)

Details

Malicious package due to data exfiltration via preinstall script, reading .npmrc, and sending data to a remote server. Few published versions.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (afc7e33b7c6ea9379f973a56f94e3b8ed59f0bc746733efa7dadba31141d0cd9)
The package renovate-config-doctolib was found to contain malicious code.