CERT24MAL-2026-17895 — Malicious code in web-pixels-manager (npm)Loading data…
CERT24Threat Observatory
Period

MAL-2026-17895 — Malicious code in web-pixels-manager (npm)

The package web-pixels-manager@76.2.4 contains a preinstall hook that runs index.js during npm install. It makes an HTTPS GET request to realwbx.com using a hardcoded Authorization value. The package name typosquats Shopify’s scoped package @shopify/web-pixels-manager, and the package description is unrelated to that name.

← Back to intelligence

MAL-2026-17895 — Malicious code in web-pixels-manager (npm)

The package web-pixels-manager@76.2.4 contains a preinstall hook that runs index.js during npm install. It makes an HTTPS GET request to realwbx.com using a hardcoded Authorization value. The package name typosquats Shopify’s scoped package @shopify/web-pixels-manager, and the package description is unrelated to that name.