Malicious Package

Overview process-mite is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in process-mite (npm)

Source: amazon-inspector 4763fac30373bc805351d0eb8e0989cde9dcd2ab2c1b18f9eb7bde4e61765191 On import of the package main, index.js auto-invokes an initialize routine that spawns a detached node loader.js process. loader.js performs an HTTPS GET against the hardcoded endpoint...

MAL-2026-16224 Malicious code in process-mite (npm)

This package is part of a malicious npm campaign published by the max233 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and...

Malicious code in process-mite (npm)

This package is part of a malicious npm campaign published by the max233 account. Importing the package automatically launches a detached JavaScript loader that retrieves and executes additional code from npoint.io. The retrieved payload communicates with an attacker-controlled server and...