Threats Tagged 'mal-2026-14243'

The flydev npm package version 0.0.1 is a malicious package that contains a destructive payload. It hides its harmful code in a deeply nested directory structure and exports a function that, when invoked, executes multiple destructive actions on Windows hosts. These actions include forced system reboot, recursive deletion of files on the C: drive, termination of critical system processes, memory exhaustion, and spawning a self-replicating fork bomb that creates numerous detached command and PowerShell processes. The package has no legitimate functionality and is designed to cause severe damage to the host system.