CERT24MAL-2026-17564 — Malicious code in the npm package tostproLoading data…
CERT24Threat Observatory
Period

MAL-2026-17564 — Malicious code in the npm package tostpro

The package tostpro@100.2.0 contains a preinstall lifecycle hook that automatically runs test.sh during npm install. After a specified time threshold, the script can send the installer’s full process environment to https://abbishal.com/sh/poc.

← Back to intelligence

MAL-2026-17564 — Malicious code in the npm package tostpro

The package tostpro@100.2.0 contains a preinstall lifecycle hook that automatically runs test.sh during npm install. After a specified time threshold, the script can send the installer’s full process environment to https://abbishal.com/sh/poc.