Malicious code in simple-date-formatter-util-5 (npm)

Source: ossf-package-analysis 0eb3042c51ca3c377dd9f4e814a53f4901a805271896f9bfd1619891be4bff5c The OpenSSF Package Analysis project identified 'simple-date-formatter-util-5' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

MAL-2026-11501 Malicious code in simple-date-formatter-util-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6c0d10eabca0cef05a136e2ffd68781a965747ad1e75bf9fd9528292bbe429 The package is advertised as a date-formatting utility but its package.json postinstall script curls cloud-provider instance metadata endpoints AWS...