proton-account (npm) · Malicious Code
Affects proton-accountSource GCVE Database
Rated by Threat Radar
Data as of 8 Sep 2026, 12:09 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| npmproton-account | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
No official patches or remediation guidance are provided. Users should avoid using the affected versions (=99.99.999, =99.99.99, =99.99.9999) of the 'proton-account' package. Consider removing or replacing the package with a trusted alternative. Monitor vendor advisories for updates.
Description
The npm package 'proton-account' versions 99.99.999, 99.99.99, and 99.99.9999 have been identified as malicious. The package is flagged because it communicates with a domain associated with malicious activity. No CVSS score or detailed technical exploit information is provided. There is no indication of known exploits in the wild or available patches.