Malicious Package

Overview pino-ulid is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in pino-ulid (npm)

Source: amazon-inspector ade54621ac8726adc77fa29c4176808cdf82d0d1f8e45c2e051a17b1fd515779 pino-ulid impersonates the popular pino and ulid packages homepage points at github.com/ulid/javascript and ships a genuine ULID code path as cover. The package.json postinstall hook runs node...

Malicious code in pino-ulid (npm)

The npm package pino-ulid is named like a ULID generator, but it is a remote-access trojan. On install, its package.json postinstall script runs node dist/node/utils.js after checking the dist files exist with existsSync. dist/node/utils.js writes a PID lock file, sets up persistence on Windows...

MAL-2026-16154 Malicious code in pino-ulid (npm)

The npm package pino-ulid is named like a ULID generator, but it is a remote-access trojan. On install, its package.json postinstall script runs node dist/node/utils.js after checking the dist files exist with existsSync. dist/node/utils.js writes a PID lock file, sets up persistence on Windows...