2 matches found
Malicious Package
Overview magika-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
9.8CVSS5.6AI score
SaveExploits0References2
MAL-2026-14247 Malicious code in magika-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd28e41bc842fd046a2bff254f450edd0b6d2d15d961fe768cf5e9ebfa197f magika-js is a typosquat of Google's magika library. The postinstall lifecycle script collects installer host identifiers hostname, platform, arch,...
5.5AI score
SaveExploits0References1
20