CERT24MAL-2026-17515 — Malicious code in monitoring-agent (npm)Loading data…
CERT24Threat Observatory
Period

MAL-2026-17515 — Malicious code in monitoring-agent (npm)

The monitoring-agent package contains Express middleware that, when each response finishes, forwards the inbound HTTP request to a hardcoded third-party host. The forwarded data includes the username, password, email address, complete headers, request body, query string, and route parameters.

← Back to intelligence

MAL-2026-17515 — Malicious code in monitoring-agent (npm)

The monitoring-agent package contains Express middleware that, when each response finishes, forwards the inbound HTTP request to a hardcoded third-party host. The forwarded data includes the username, password, email address, complete headers, request body, query string, and route parameters.