Malware in streak-math-metrics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview streak-math-metrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MSC-2026-11431

Active npm supply chain attack in which 14 trojanized packages masquerading as calendar, streak, and math utility libraries deliver RedC2 4.0, an AI-assisted Linux backdoor, via a bundled native binary disguised as a math accelerator math-core.bin, calc-math.dat, and similar. The malicious module...