Malicious code in jupyter-binding (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

Malicious Package

Overview jupyter-binding is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-66 Malicious code in jupyter-binding (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

Malicious code in jupyter-binding (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...