Malicious code in black-spindle-2 (npm)

Source: amazon-inspector 433228fbed18f3104fed4cd1bce59bc5a76b8ea061d18c8fc9516c92b6b26e90 package.json declares a postinstall script that runs curl against the ephemeral host http://778e-181-63-25-28.ngrok-free.app over plain HTTP, embedding a shell command-substitution expression in the URL path...

Malicious code in black-spindle (npm)

Source: ossf-package-analysis c5ef30c4ec24f78fa57d10f6bd8e7fb7be307fc23e833428af785b2013bf2fab The OpenSSF Package Analysis project identified 'black-spindle' @ 999.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in black-spindle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd746168a2e733a835005f5fd321e1bab9a24688a4c5d413247ae065ea29786 [email protected] declares a postinstall lifecycle hook in package.json that executes curl http://778e-181-63-25-28.ngrok-free.app/test on every...

MAL-2026-18359 Malicious code in black-spindle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd746168a2e733a835005f5fd321e1bab9a24688a4c5d413247ae065ea29786 [email protected] declares a postinstall lifecycle hook in package.json that executes curl http://778e-181-63-25-28.ngrok-free.app/test on every...