Malicious code in @dransay/address-validation (npm)

Source: ossf-package-analysis 82ababa5637b2f53f5087a161eeba1b6ca6ddba6d31ebb7842614bf0da119fa7 The OpenSSF Package Analysis project identified '@dransay/address-validation' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in @dransay/address-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189df4f2830e64a9cfbd0bed6ae8357aff16dc5496d83c3e5e4bd9457b536fa7 @dransay/[email protected] declares a preinstall script node beacon.js that fires on npm install and performs a DNS lookup plus HTTPS GET to ...

MAL-2026-17668 Malicious code in @dransay/address-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189df4f2830e64a9cfbd0bed6ae8357aff16dc5496d83c3e5e4bd9457b536fa7 @dransay/[email protected] declares a preinstall script node beacon.js that fires on npm install and performs a DNS lookup plus HTTPS GET to ...