Malicious code in colro-name (npm)

The package colro-name was found to contain malicious code...

MAL-2025-17303 Malicious code in colro-name (npm)

The package colro-name was found to contain malicious code...

Malicious Package in colro-name

Version 9.0.0 of colro-name contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys...