Malicious code in golaaa (npm)

Source: amazon-inspector 01b6c227c2b9147d78df3a778d5de60d58b9cb115c6e7a7ce811143e05413ceb The package launches a local browser with remote debugging on port 9222, attaches over the Chrome DevTools Protocol, disables Content Security Policy, and installs a persistent script...

MAL-2026-13392 Malicious code in golaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f9a2a9514f30f4def10f6a0a21b4abf4f882fa29a45c6b7c93e96490f49c13 The package's main module cdpinject.js runs on require. It disables TLS certificate verification process-wide...

Malicious Package

Overview golaaa is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...