Malicious code in pretty-logger-js (npm)

pretty-logger-js is a malicious npm package that when imported downloads and executes a C2 dropper from https://www.jsonkeeper.com/b/OTOAQ. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e46da449e6d21efcef5e9975a2f8e90c31369882800ed4c560ae47ade99b53 The packa...

MAL-2026-2908 Malicious code in pretty-logger-js (npm)

pretty-logger-js is a malicious npm package that when imported downloads and executes a C2 dropper from https://www.jsonkeeper.com/b/OTOAQ. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e46da449e6d21efcef5e9975a2f8e90c31369882800ed4c560ae47ade99b53 The packa...

mongoose-jsonify (>=3.0.1 <=3.0.2) potentially affected by unknown CVE via pretty-logger-js (=1.0.2)

pretty-logger-js NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pretty-logger-js and may be impacted: - mongoose-jsonify =3.0.1, =3.0.2 Source cves: unknown CVE Source advisory: OSV:MAL-2026-2908...