Malicious Package

Overview alloy-graphql is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of the...

MAL-2026-16063 Malicious code in alloy-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee3815d12ec95aedb4bbe0d3de5c516e99163ca1eba52c2a3de7038b9a2ac0 package.json declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, home directory, DNS servers, curre...

Malicious code in alloy-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee3815d12ec95aedb4bbe0d3de5c516e99163ca1eba52c2a3de7038b9a2ac0 package.json declares a preinstall hook that runs index.js on npm install. The script collects hostname, username, home directory, DNS servers, curre...