trgrip

MAL-2026-2912

Malicious code in trgrip (npm)

Details

trgrip is a malicious npm package that when imported downloads a C2 dropper from https://44.206.172[.]239:7443/direct/download/97900a0e-c691-483a-a988-97b76f205c0f and executes it.

---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (3b787c102a6313ef9eaafaedccd83ab634da290283df07b97c4c4eb62117ad55)
The package trgrip was found to contain malicious code.