Malware in wos-library

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious Package

Overview wos-library is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2026-16373 Malicious code in wos-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0281f721b8645a472011b83299574bb7e74651a8f0e628c519bafb19b86938 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malware in wos-library-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wos-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0281f721b8645a472011b83299574bb7e74651a8f0e628c519bafb19b86938 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in wos-library-ui (npm)

Source: amazon-inspector 3124274f6fcb74cf0805b5545f6952214b90329427f55c616c868f760d592e63 [email protected] declares scripts.preinstall = 'node poc.js', which auto-runs on npm install. poc.js reads os.hostname, os.userInfo.username, and process.cwd and transmits them to the hardcoded Interact...