Malicious code in nitro-cjs-requirer (npm)

Source: amazon-inspector b78ca7e6d900dde3d7b9a367cdc359f3ec47a8b662ff53dd9c6542edbdb00b0b The package is a beacon carrier with no real functionality. The declared postinstall script runs beacon.cjs, which POSTs the package name, os.hostname, dirname install path, process.cwd, and node version to...

Malicious Package

Overview nitro-cjs-requirer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-17775 Malicious code in nitro-cjs-requirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78ca7e6d900dde3d7b9a367cdc359f3ec47a8b662ff53dd9c6542edbdb00b0b The package is a beacon carrier with no real functionality. The declared postinstall script runs beacon.cjs, which POSTs the package name, os.hostnam...

Malicious code in nitro-cjs-requirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78ca7e6d900dde3d7b9a367cdc359f3ec47a8b662ff53dd9c6542edbdb00b0b The package is a beacon carrier with no real functionality. The declared postinstall script runs beacon.cjs, which POSTs the package name, os.hostnam...