Skip to main content
MalwarePublished

dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5 (npm) · Malicious Code

Affects dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5Source GCVE Database

0

Malicious package : remove dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5 and rotate any secrets on hosts that installed it.

Data as of 14 Nov 2026, 00:31 UTC

Classification

Malicious package

Published to npm · OSV MAL-2026-19743

What to do

Remove dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5 from every project, lockfile and image that pulls it in. Treat any host that installed it as compromised: rotate the credentials, tokens and keys it could read, from a clean machine.

Affected software

ProductAffectedFixed in
npmdowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5Affected–Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

The npm package 'dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5' contains malicious code that compromises any computer on which it is installed or executed. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removal of the package alone does not guarantee eradication of all malicious software introduced by its installation.

References

Community reviews

Loading reviews…

Get alerts for dowload_ebok_geography_of_the_planets_famous_places_on_mars_j_by_baby_professor_ta0f5 by Slack, email or webhook with the Individual plan and up, or bring in OffSeq incident response (opens in a new tab).

Added
Analysed
Data as of
14 Nov 2026, 00:31 UTC