Malicious code in omniauth-recharge-rails-example (npm)

Source: ossf-package-analysis 915a378563ab8481e64d0a202e4d037a722361eae5263812c7648dce30cc557e The OpenSSF Package Analysis project identified 'omniauth-recharge-rails-example' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated wit...

MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...

Malicious code in omniauth-recharge-rails-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...

Malicious Package

Overview omniauth-recharge-rails-example is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...