Malicious Package

Overview @hrmony/interfaces is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

MAL-2026-17262 Malicious code in @hrmony/interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7837cf2dff543cfea2f35e0dea5f767ca7b8e8f81129f4c770e5693ed247c0e index.js executes top-level async code on any require/import of the package. The code 1 obtains an AWS IMDSv2 token and fetches EC2 instance identity...

Malicious code in @hrmony/interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7837cf2dff543cfea2f35e0dea5f767ca7b8e8f81129f4c770e5693ed247c0e index.js executes top-level async code on any require/import of the package. The code 1 obtains an AWS IMDSv2 token and fetches EC2 instance identity...