Malicious code in num-format-helper (npm)

Source: ossf-package-analysis 8a8aaefbf5f2df138b5dd99eeb8aa0247ffe7570759470e6ad7479fc0700345f The OpenSSF Package Analysis project identified 'num-format-helper' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in num-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a0ecb436de3a0e93a577a3ba1733b227bd536e02acf371df530c6a320e1001 Package advertises itself as a number/locale formatting helper but its postinstall.js runs automatically on npm install and shells out via...

MAL-2026-11107 Malicious code in num-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a0ecb436de3a0e93a577a3ba1733b227bd536e02acf371df530c6a320e1001 Package advertises itself as a number/locale formatting helper but its postinstall.js runs automatically on npm install and shells out via...