Threats tagged 'mal-2026-12259'

The npm package tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks version 20.4.7 contains malicious code that downloads and executes attacker-controlled binaries on the host system. The package uses obfuscated hostname assembly and disguises the downloaded binaries with filenames mimicking legitimate diagnostic tools. Execution occurs upon installation or requiring the package, leading to full system compromise. Immediate removal and secret/key rotation are strongly advised.