Malicious code in @custombots/custombot (npm)

Source: ossf-package-analysis 07c87d7c1e7e788959af6de895c76293fd0922dd1a422da325962de7f8d3d19a The OpenSSF Package Analysis project identified '@custombots/custombot' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with maliciou...

Malicious code in @custombots/custombot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88fd82e9d147a4fad43b89bab0b975fe57714abf16356eb39ec0ae62dcc7949 index.js opens a TCP connection to a base64-obfuscated IP address decodes to 85.137.253.124:1111, spawns /bin/sh, and pipes the shell's...

MAL-2026-11498 Malicious code in @custombots/custombot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88fd82e9d147a4fad43b89bab0b975fe57714abf16356eb39ec0ae62dcc7949 index.js opens a TCP connection to a base64-obfuscated IP address decodes to 85.137.253.124:1111, spawns /bin/sh, and pipes the shell's...