Malware in fuels-forc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview fuels-forc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in fuels-forc (npm)

Source: amazon-inspector b993583bec4136d0b060dc6391c10e15f836e605b5b13b97dea6bb7a3dc1e5cd bin/cli.js runs whoami and reads os.hostname / os.platform, then POSTs the package name together with those host identifiers to the hardcoded endpoint https://oobme.kunalsharma0553.workers.dev/r/7bq6fz3l15r9...

Malicious code in fuels-forc (npm)

The package 'fuels-forc' was identified as containing malicious obfuscated code. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b993583bec4136d0b060dc6391c10e15f836e605b5b13b97dea6bb7a3dc1e5cd bin/cli.js runs whoami and reads os.hostname / os.platform, then POS...

MAL-2026-15626 Malicious code in fuels-forc (npm)

The package 'fuels-forc' was identified as containing malicious obfuscated code. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b993583bec4136d0b060dc6391c10e15f836e605b5b13b97dea6bb7a3dc1e5cd bin/cli.js runs whoami and reads os.hostname / os.platform, then POS...