Malicious Package

Overview nodetokyo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in nodetokyo (npm)

Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or by downloading the python.org installer and running it...

Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

MAL-2026-16388 Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

Malicious Package

Overview nodetokyo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...