MAL-2026-16283 Malicious code in @shared-web/assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd9342e97dc9f655a994fe1091125f717cbfa7b89aa6a2333662ad23ad6771 The package runs an install lifecycle script node index.js and also executes ./lib/core.js on require. That code collects os.userInfo.username,...

Malicious code in @shared-web/assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd9342e97dc9f655a994fe1091125f717cbfa7b89aa6a2333662ad23ad6771 The package runs an install lifecycle script node index.js and also executes ./lib/core.js on require. That code collects os.userInfo.username,...

Malicious Package

Overview @shared-web/assets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...