Threats Tagged 'mal-2026-12211'

The npm package statist-browser-typed-client-mb.product.analytics version 20.1.2 contains malicious code that downloads and executes a native binary from remote servers without verification. This results in full remote code execution on any machine that installs or requires the package. The malicious payload is obfuscated to evade detection and runs detached from the main process. Systems with this package installed should be considered fully compromised, and all secrets and keys on those systems must be rotated immediately. Removal of the package alone does not guarantee eradication of the malware.