MSC-2026-6423

Dependency-confusion PoC stage of the internallibv688 malicious package npm-removed. Ships GitLab-CI template doing 'npm update --registry http://0.0.0.0:4873/' non-canonical registry beacon + self-require. Sibling versions 1.0.2/1.0.3 escalate to a reverse shell...

Malware in internallib_v688

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...