CERT24MAL-2026-17754 — Malicious code in the npm package @library-wide/library-shellLoading data…
CERT24Threat Observatory
Period

MAL-2026-17754 — Malicious code in the npm package @library-wide/library-shell

OpenSSF Package Analysis identified npm package @library-wide/library-shell version 99.9.1 as malicious. The package directly depends on an HTTPS-hosted tarball of ltidisafe, whose lifecycle scripts may execute on the installer’s machine during installation.

← Back to intelligence

MAL-2026-17754 — Malicious code in the npm package @library-wide/library-shell

OpenSSF Package Analysis identified npm package @library-wide/library-shell version 99.9.1 as malicious. The package directly depends on an HTTPS-hosted tarball of ltidisafe, whose lifecycle scripts may execute on the installer’s machine during installation.