Threats Tagged 'mal-2026-6199'

The ts-big-ecro npm package is a malicious typosquatting clone of the legitimate big.js library. It impersonates the original by copying its code and metadata but injects attacker-controlled code that executes on every import or require. This code loads an undeclared and suspicious dependency, parket-helper, which can execute arbitrary code. The package's declared dependency server-parket is unrelated to its stated purpose, indicating a dependency-confusion trojan-loader pattern. Installing or running this package compromises the host system, potentially exposing all stored secrets and keys.