MAL-2026-11536 Malicious code in discord-vibegrations-api-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39dfe430611b304685f7a5e9b29ecd1661c5238bd2ed706e485e1d82540cfc6 The package declares a postinstall lifecycle hook postinstall: node postinstall.js that opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes it to...

MAL-2026-11537 Malicious code in discord-vibegrations-api-natives (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb64ecc29aa68ec4659bab280f4ffd2c3de889cc966c0974f85b0c488edc603 On npm install, the package's postinstall.js opens a TCP socket to 5.tcp.eu.ngrok.io:15496 and pipes the socket's bytes into the stdin of a spawned s...