Malicious Package

Overview engin1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in engin1 (npm)

Source: amazon-inspector 1e843727c643c5d966acaa66461f7e392813a4284cd8181b4bb9b24ddfb8447a The package's main entrypoint index.js invokes an initializer at top level that spawns loader.js as a detached background Node process on every require/import. loader.js issues an HTTPS GET to...

MAL-2026-16215 Malicious code in engin1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e843727c643c5d966acaa66461f7e392813a4284cd8181b4bb9b24ddfb8447a The package's main entrypoint index.js invokes an initializer at top level that spawns loader.js as a detached background Node process on every...

Malicious code in engin1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e843727c643c5d966acaa66461f7e392813a4284cd8181b4bb9b24ddfb8447a The package's main entrypoint index.js invokes an initializer at top level that spawns loader.js as a detached background Node process on every...