Malicious code in @rbx-ts/services (npm)

Source: amazon-inspector 22a1774c78b52b3d507d305227a1a258795a4e68d52b8366e0010c5d0bb80126 scripts/postinstall.js is obfuscated with hex-escaped identifiers and base64-encoded strings that hide standard API names 'https', 'fs', 'childprocess', 'powershell', '.exe' and a download URL. On npm instal...

MAL-2026-13630 Malicious code in @rbx-ts/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476bbe7c2ce12348142e93deffe53c9d4d6dfef3400030af81cff902bac5935 This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. Its postinstall script...