Threats Tagged 'mal-2026-10762'

The @edgecommons/edgecommons npm package is a malicious package published to perform dependency confusion reconnaissance. It impersonates an internal package namespace to trick misconfigured resolvers into installing it instead of the intended private package. During installation, it runs a preinstall script that collects host telemetry including public IP, hostname, OS username, and environment metadata, then sends this data to an attacker-controlled Sentry endpoint. This behavior is consistent with reconnaissance rather than direct exploitation or payload delivery.