Malicious code in harmony-app-toolkit (npm)

Source: ossf-package-analysis fff7c26e7d15d67157e1b61e4279a0441a9c09fe5c1ef5ad94a8c5ce1b320156 The OpenSSF Package Analysis project identified 'harmony-app-toolkit' @ 22.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

MAL-2026-14055 Malicious code in harmony-app-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c12fe64417829f19a3ad302001c909c0825b09e1c4a25c957eb8aa96997f49 The package declares a preinstall lifecycle script preinstall.js that reads a hex-encoded command from preinstall.json, decodes it with...

Malicious code in harmony-app-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c12fe64417829f19a3ad302001c909c0825b09e1c4a25c957eb8aa96997f49 The package declares a preinstall lifecycle script preinstall.js that reads a hex-encoded command from preinstall.json, decodes it with...