Malicious code in @heartlandone-private/fontawesome-pro (npm)

Source: ossf-package-analysis b5bd52805195c9e3575760b3eaf605a2b9cb0fcbdde2311b7075d2d8095c4900 The OpenSSF Package Analysis project identified '@heartlandone-private/fontawesome-pro' @ 6.3.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated...

MAL-2026-11093 Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...

Malicious code in @heartlandone-private/fontawesome-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc8f9f53c05ecc2642ce82c3841e046025662c206f002b4c6da11ff0cbc763d The package's postinstall lifecycle hook runs node index.js, which issues an HTTPS GET to a hardcoded Burp Collaborator subdomain at...