Malicious code in @temptation.js/utils (npm)

Source: ossf-package-analysis c8d0cfc44fc0fd8c597831c7da133a0e02ba0f1644f9777edb7629099bb367b8 The OpenSSF Package Analysis project identified '@temptation.js/utils' @ 999.9.16 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

MAL-2026-14410 Malicious code in @temptation.js/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...

Malicious Package

Overview @temptation.js/utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...