Malicious Package

Overview layer2-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in layer2-sdk (npm)

Source: amazon-inspector 1bd6521302fb3f49a8c444435a33834be40a420972df3a03cadb5fdb3176a68f index.js line 75 decodes a base64-encoded string via Buffer.from..., 'base64'.toString'utf8' and passes the result to an evaluator, executing hidden code when the module is loaded. The obfuscated-and-exec'd...

MAL-2026-14278 Malicious code in layer2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd6521302fb3f49a8c444435a33834be40a420972df3a03cadb5fdb3176a68f index.js line 75 decodes a base64-encoded string via Buffer.from..., 'base64'.toString'utf8' and passes the result to an evaluator, executing hidden...

Malicious code in layer2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd6521302fb3f49a8c444435a33834be40a420972df3a03cadb5fdb3176a68f index.js line 75 decodes a base64-encoded string via Buffer.from..., 'base64'.toString'utf8' and passes the result to an evaluator, executing hidden...