Malicious code in uipathisfun (npm)

🗓️ 20 Mar 2026 07:05:46Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 5 Views

The npm package uipathisfun version 1.0.3 is malicious for communicating with a malicious domain.

Vulners

Node

npm uipathisfunMatch1.0.3

OR

npm uipathisfunMatch1.0.5

OR

npm uipathisfunMatch1.0.7

OR

npm uipathisfunMatch1.0.8

OR

npm uipathisfunMatch1.0.9

OR

npm uipathisfunMatch1.0.11

OR

npm uipathisfunMatch1.0.13

OR

npm uipathisfunMatch1.0.12

OR

npm uipathisfunMatch1.0.14

OR

npm uipathisfunMatch1.0.15

OR

npm uipathisfunMatch1.0.16

OR

npm uipathisfunMatch1.0.17

OR

npm uipathisfunMatch1.0.20

OR

npm uipathisfunMatch1.0.21

OR

npm uipathisfunMatch1.0.22

OR

npm uipathisfunMatch1.0.23

OR

npm uipathisfunMatch1.0.24

OR

npm uipathisfunMatch1.0.28

OR

npm uipathisfunMatch1.0.33

OR

npm uipathisfunMatch1.0.36

OR

npm uipathisfunMatch1.0.35

OR

npm uipathisfunMatch1.0.41

Source	Link
github	www.github.com/advisories/GHSA-9674-vwjj-qxjp

23 Mar 2026 05:16Current

5.8Medium risk

Vulners AI Score5.8

uipathisfun node package manager version 1.0.3 malicious domain package analysis