Malicious code in f0-form-manipulator (npm)

Source: ossf-package-analysis e78bd44b3fd8116ff604f6faacbbf84e80c45af83fc6493040a20dd96a1eaa93 The OpenSSF Package Analysis project identified 'f0-form-manipulator' @ 28.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malware in f0-form-manipulator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview f0-form-manipulator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-11060 Malicious code in f0-form-manipulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058782981a80d3fc90af74a840a00cefa0c58b9861c481d0444b7f4f3e6a014b On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir,...