Malware in aws-blog

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview aws-blog is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in aws-blog (npm)

Source: amazon-inspector b036991e88a4be9813e89ba9861b39ae37fbd9201d1bd017f81c8b33d5f5e44b package.json declares a dependency whose key equals the package's own name aws-blog with a value of https://repo.securityctrl.com/aws-blog instead of a registry version range. On npm install, npm fetches...

MAL-2026-15498 Malicious code in aws-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b036991e88a4be9813e89ba9861b39ae37fbd9201d1bd017f81c8b33d5f5e44b package.json declares a dependency whose key equals the package's own name aws-blog with a value of https://repo.securityctrl.com/aws-blog instead of...

Malicious code in aws-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b036991e88a4be9813e89ba9861b39ae37fbd9201d1bd017f81c8b33d5f5e44b package.json declares a dependency whose key equals the package's own name aws-blog with a value of https://repo.securityctrl.com/aws-blog instead of...