Malicious code in sc-wizard (npm)

Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02 package.json declares the package's only dependency ltidisafe as a direct HTTPS tarball URL...

MAL-2026-18062 Malicious code in sc-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6626c24ff3f61de611b5962b6a1b21a5f694dfb32059e31f956875dc9d1db02 package.json declares the package's only dependency ltidisafe as a direct HTTPS tarball URL...

Malicious Package

Overview sc-wizard is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...