WS-2019-0481

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking...

MAL-2025-36693 Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

Malicious code in test-module-a (npm)

The package test-module-a was found to contain malicious code...

Malicious Package in test-module-a

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own any...

PT-2020-21120

Name of the Vulnerable Software and Affected Versions test-module-a versions all versions Description The issue concerns malicious code in the preinstall script of the affected software, which attempts to hijack packages by adding another maintainer to every package owned by the user. It is...

Malicious Package

Overview All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you...

Malicious Module

pandora-doomsday and test-module-a are modules which can infect other modules. During installation, the module runs a postinstall script that adds the package's author mr-robot as an owner to every other package owned by the user that ran the npm install method...