Malicious code in shrugging-logging (npm)

The package shrugging-logging was found to contain malicious code...

MAL-2025-33167 Malicious code in shrugging-logging (npm)

The package shrugging-logging was found to contain malicious code...

PT-2020-21468

Name of the Vulnerable Software and Affected Versions shrugging-logging versions affected versions not specified Description The issue concerns malicious code in the shrugging-logging package, specifically a postinstall script. This script fetches the names of npm packages owned by the user and...

Malicious Package

Overview All versions of shrugging-logging contain malicious code as a postinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. I...