6 matches found
Malicious Package
Overview node-procmetrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in node-procmetrics (npm)
Source: amazon-inspector e41a88d3fab17af2429cc051cce026d47622123ce4005d3fbdda844dfca2783a install.js executes automatically via the package.json postinstall hook. It XOR-decodes key 0x5A a hardcoded npm registry auth token and writes it into the installer's global npm config at...
Malicious code in node-procmetrics-data (npm)
Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev, /tmp, /run into /tmp/.archive.tar.gz, splits the archive int...
Malicious code in node-fsmetrics-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67fad1d72f63941a3973df07e6cbd980c9e3c3bbe5041818f58b9be07d6b7e9 The tarball contains archive-sender.js, which tars the directory /root/.codex, splits the archive into 200MB chunks, and uploads each chunk by runnin...
Malicious code in node-procmetrics-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev,...
MAL-2026-10464 Malicious code in node-procmetrics-data (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea7e26b73fb4fa21cdd545045f2a360a02d1013efe25cd6ab7aedb1fec72c9b [email protected] ships archive-sender.js which, at install/execution, tars the installer's root filesystem excluding /proc, /sys, /dev,...