Malicious Package

Overview @hrmony/pladddform-frontend is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

@hrmony/account-management (1.99.0), @hrmony/gutscheinverwaltung (1.99.0) +3 more potentially affected by unknown CVE via @hrmony/kit-5 (1.0.1)

@hrmony/kit-5 NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @hrmony/kit-5 and may be impacted: - @hrmony/account-management 1.99.0 - @hrmony/gutscheinverwaltung 1.99.0 - @hrmony/interfaces 0.99.0 - @hrmony/organisationsverwaltung...

Malicious code in @hrmony/pladddform-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f03abfe6149423144b6d3143a66cbca7925bb6eb736b1ece350d5a344684eb9 @hrmony/[email protected] ships an index.js whose top-level code, executed on require/import, POSTs to the hardcoded attacker host...

MAL-2026-17276 Malicious code in @hrmony/pladddform-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f03abfe6149423144b6d3143a66cbca7925bb6eb736b1ece350d5a344684eb9 @hrmony/[email protected] ships an index.js whose top-level code, executed on require/import, POSTs to the hardcoded attacker host...