mamadoos-test (npm) · Malicious Code
Affects mamadoos-testSource GCVE Database
Rated by Threat Radar
Data as of 8 Sep 2026, 11:22 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmmamadoos-test | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until a fix is available, avoid installing or updating to versions 10.0.0, 10.1.0, and 11.0.0 of mamadoos-test. Review your dependency tree for this package and consider removing or replacing it. Monitor for updates from the package maintainer or npm security advisories for remediation.
Description
The npm package mamadoos-test contains malicious code that executes a preinstall script during npm install. This script sends the installer's OS username, hostname, and current working directory to a third-party URL without user consent. The package also declares itself as a dependency, consistent with dependency confusion tactics to capture internal environment details. This behavior can lead to unconsented exfiltration of host-identifying information useful for follow-on attacks.