Malicious code in rank4222wun (npm)

🗓️ 23 Jan 2026 08:25:42Reported by OSSF Malicious PackagesType

ossf

ossf🔗 github.com👁 6 Views

Malicious npm package [email protected] communicates with a domain associated with malicious activity.

Vulners

Node

npm rank4222wunMatch1.0.6

OR

npm rank4222wunMatch1.0.14

OR

npm rank4222wunMatch1.0.15

OR

npm rank4222wunMatch1.0.18

OR

npm rank4222wunMatch1.0.19

OR

npm rank4222wunMatch1.0.22

OR

npm rank4222wunMatch1.0.31

OR

npm rank4222wunMatch1.0.28

OR

npm rank4222wunMatch1.0.32

OR

npm rank4222wunMatch1.0.34

OR

npm rank4222wunMatch1.0.39

OR

npm rank4222wunMatch1.0.44

OR

npm rank4222wunMatch1.0.41

OR

npm rank4222wunMatch1.0.53

OR

npm rank4222wunMatch1.0.56

OR

npm rank4222wunMatch1.0.54

OR

npm rank4222wunMatch1.0.58

OR

npm rank4222wunMatch1.0.60

OR

npm rank4222wunMatch1.0.61

OR

npm rank4222wunMatch1.0.62

OR

npm rank4222wunMatch1.0.64

OR

npm rank4222wunMatch1.0.63

OR

npm rank4222wunMatch1.0.67

OR

npm rank4222wunMatch1.0.68

OR

npm rank4222wunMatch1.0.69

OR

npm rank4222wunMatch1.0.72

OR

npm rank4222wunMatch1.0.71

OR

npm rank4222wunMatch1.0.70

OR

npm rank4222wunMatch1.0.80

OR

npm rank4222wunMatch1.0.74

OR

npm rank4222wunMatch1.0.76

OR

npm rank4222wunMatch1.0.78

OR

npm rank4222wunMatch1.0.77

OR

npm rank4222wunMatch1.0.88

OR

npm rank4222wunMatch1.0.92

OR

npm rank4222wunMatch1.0.89

OR

npm rank4222wunMatch1.0.95

OR

npm rank4222wunMatch1.0.90

OR

npm rank4222wunMatch1.0.97

OR

npm rank4222wunMatch1.0.52

Source	Link
github	www.github.com/advisories/GHSA-3phq-qxp9-55pv

28 Jan 2026 06:49Current

5.8Medium risk

Vulners AI Score5.8

rank4222wun malicious domain npm package