Threats Tagged 'mal-2026-10103'
View all threats tagged with 'mal-2026-10103'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'mal-2026-10103'
Click on any threat for detailed analysis and mitigation recommendations
MAL-2026-10103: Malicious code in optimize-regex (npm) 0 The npm package 'optimize-regex' version 1.2.1 is identified as malicious. It declares itself as a dependency resolved via an untrusted plain-HTTP tarball URL hosted on an unrelated domain (pack.nppacks.com), outside the official npm registry. This setup allows the remote host to control the code installed during 'npm install', potentially delivering malicious payloads. The package's visible code is a near-verbatim clone of a legitimate package but serves as a decoy while the actual malicious code is delivered through URL-scheme dependency resolution. Join the discussion | GCVE Database | 07/09/2026, 23:01:55 UTC Added: 07/10/2026, 09:24:21 UTC |
Showing 1 to 1 of 1 result