Malicious code in commnader (npm)

The package commnader was found to contain malicious code...

confluence-static-site-builder (>=1.0.0-m04 <=1.0.0-m08) potentially affected by unknown CVE via commnader (=0.0.1-security)

commnader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17424...

MAL-2025-17424 Malicious code in commnader (npm)

The package commnader was found to contain malicious code...

confluence-static-site-builder (>=1.0.0-m04 <=1.0.0-m08) potentially affected by unknown CVE via commnader (=0.0.1-security)

commnader NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on commnader and may be impacted: - confluence-static-site-builder =1.0.0-m04, =1.0.0-m08 Source cves: unknown CVE Source advisory: OSV:GHSA-855M-JCHH-9QJC...

Malicious Package in commnader

All versions of commnader typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...