Threats Tagged 'mal-2026-10014'

The nodemon-sudo npm package is a malicious package that impersonates the legitimate nodemon package by reusing its metadata and CLI name. It includes an unrelated dependency not present in the original nodemon, causing potential dependency pollution. Although no direct evidence of data exfiltration or backdoors was observed, the package's CLI hijacking risk and injected dependencies pose a significant threat. Systems with this package installed should be considered compromised, and all secrets should be rotated. Removal of the package alone may not fully remediate the compromise.