MAL-2025-33706 Malicious code in sparkies (npm)

The package sparkies was found to contain malicious code...

GHSA-C4FM-46GM-4469 Malicious Package in sparkies

This package contained malicious code. The package uploaded system information such as OS and hostname to a remote server. Recommendation Remove the package from your environment. There are no indications of further compromise...

Malicious Package

sparkies is a malicious package. When the package is installed or required, the package attempts to send hostname information to the attacker's server, affecting confidentiality of the victim's server which can potentially bridges to other attack vectors like remote code execution...