Threats Tagged 'mal-2026-10229'

The enbd-react-error-boundry npm package is a malicious package published as part of a dependency confusion campaign. It mimics an internal package naming convention to trick misconfigured resolvers into installing it instead of the legitimate private package. The package executes a preinstall hook that collects host telemetry including public IP and PII, then sends this data to an attacker-controlled Sentry project. This behavior occurs automatically during npm install, potentially compromising any system where the package is installed. The package also silently redirects any captured errors to the attacker's Sentry endpoint if no other DSN is provided, further exfiltrating data.